Buffer Over-read in WLAN HOST

Buffer Over-read in WLAN Host Communication

Use After Free in WLAN Host Communication

Integer Overflow or Wraparound in WLAN HOST

Stack-based Buffer Overflow in WLAN HAL

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Kernel

Improper Restriction of Operations within the Bounds of a Memory Buffer in BT Controller

Buffer Copy without Checking Size of Input in Audio

Buffer Copy Without Checking Size of Input in WLAN Host

Improper Validation of Array Index in WLAN HAL

Buffer Copy Without Checking Size of Input in WLAN HAL

Improper Validation of Array Index in WLAN HAL

Improper Validation of Array Index in WLAN HAL

Buffer Copy without Checking the Size of Input in WLAN Firmware

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN

Memory Corruption in WLAN HOST while fetching TX status information

Memory Corruption in WLAN HOST while parsing QMI WLAN Firmware response message

Memory Corruption in WLAN HOST while parsing QMI response message from firmware

Memory Corruption in WLAN HOST while processing WLAN FW request to allocate memory

Memory corruption in WLAN HOST while receiving an WMI event from firmware

Memory corruption in FM Host due to buffer copy without checking the size of input in FM Host

Memory corruption in WLAN due to integer overflow to buffer overflow in WLAN during initialization phase

Memory corruption in modem due to buffer copy without checking size of input while receiving WMI command

Memory corruption due to buffer copy without checking size of input in modem while receiving WMI_REQUEST_STATS_CMDID command

Possible out of bound read due to improper length calculation of WMI message

Possible out of bound write due to improper validation of number of timer values received from firmware while syncing timers in Snapdragon Auto, Snapdragon Compute, Snapdragon…

Improper validation of data length received from DMA buffer can lead to memory corruption

Buffer Over-read in WLAN Firmware

Reachable Assertion in WLAN Firmware

Buffer Over-read in WLAN Firmware

Buffer Over-read in WLAN Firmware

Buffer Over-read in WLAN Host Communication

Buffer Over-read in WLAN Host Communication

Buffer Over-read in WLAN Host Communication

Buffer Over-read in WLAN Host

Buffer Over-read in WLAN Host

Buffer Over-read in WLAN HOST

Buffer Over-read in WLAN Host Cmn

Integer Overflow or Wraparound in WLAN Host Communication

Buffer Over-read in WLAN Host Communication

Use After Free in WLAN Host

Buffer Over-read in WLAN Host Communication

Buffer Over-read in WLAN Firmware

Buffer Over-read in WLAN Host

Buffer Over-read in WLAN Firmware

Buffer Over-read in WLAN Host

Buffer Over-read in WLAN Host

Integer Overflow or Wraparound in WLAN Host

Buffer Over-read in WLAN HOST

Buffer Over-read in WLAN Host