Integer Overflow or Wraparound in Graphics Linux

Integer Overflow to Buffer Overflow in TZ Secure OS

Improper handling of permissions of a shared memory region can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…

Improper validation of memory region in Hypervisor can lead to incorrect region mapping in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…

Accepting AMSDU frames with mismatched destination and source address can lead to information disclosure in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer…

Possible integer overflow due to improper check of batch count value while sanitizer is enabled in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…

Buffer Over-read in Data Network Stack & Connectivity

Permissions, Privileges, and Access Controls in Video Analytics and Processing

Integer Overflow or Wraparound in Audio

Out-of-bounds Write in Video

Use After Free in HLOS

Improper Validation of Array Index in Hypervisor

Buffer Copy Without Checking Size of Input in Graphics Linux

Integer Overflow to Buffer Overflow in Audio

Use After Free in DSP Service

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in FM Host

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in FM Host

Improper Access Control in Graphics Linux

Buffer Over-read in Trusted Execution Environment

Double Free in HLOS

Buffer Copy Without Checking Size of Input in Trusted Execution Environment

Use of Out-of-range Pointer Offset in Video

Use After Free in Kernel

Buffer Copy Without Checking Size of Input in SPS Applications

Use After Free in Audio

Use of Out-of-range Pointer Offset in Audio

Integer Overflow or Wraparound in TZ Secure OS

Buffer Copy without Checking Size of Input in HLOS

Buffer Copy Without Checking Size of Input in Boot

Buffer Copy Without Checking Size of Input in Audio

Improper Authorization in HLOS

Improper Authentication in Core

Improper Input Validation in HLOS

Use After Free in Graphics

Stack-based Buffer Overflow in WIN Product

Buffer Copy without Checking the Size of Input(Classic Buffer Overflow) in Core Platform

Buffer Copy without Checking the Size of Input(Classic Buffer Overflow) in Core Platform

Integer Overflow to Buffer Overflow in RIL

Integer Overflow or Wraparound in Audio

Integer Overflow or Wraparound in Audio

Improper Validation of Array Index in GPS HLOS Driver

Memory Corruption in WLAN HOST while fetching TX status information

Memory Corruption in Audio while allocating the ion buffer during the music playback

Memory Corruption in Data Network Stack & Connectivity when sim gets detected on telephony

Memory Corruption in Linux while processing QcRilRequestImsRegisterMultiIdentityMessage request

Memory corruption due to improper access control in kernel while processing a mapping request from root process

Memory corruption due to double free in Core while mapping HLOS address to the list

Memory corruption in Linux while sending DRM request

Memory corruption in Linux android due to double free while calling unregister provider after register call

Memory Corruption in Graphics while accessing a buffer allocated through the graphics pool