Use After Free in DSP Service

Integer Overflow or Wraparound in Graphics Linux

Use of Out-of-range Pointer Offset in Graphics

Improper Restriction of Operations within the Bounds of a Memory Buffer in Data Network Stack & Connectivity

Buffer Over-read in WLAN Host Cmn

Improper Validation of Array Index in WLAN Host Communication

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Audio

Buffer Copy Without Checking Size of Input in Audio

Use of Out-of-range Pointer Offset in WLAN HOST

Use After Free in WLAN Host Communication

Buffer Copy Without Checking Size of Input in Video

Use of Out-of-range Pointer Offset in WLAN HOST

Stack-based Buffer Overflow in WLAN HOST

Buffer Copy without Checking Size of Input (`Classic Buffer Overflow`) in Video

Untrusted Pointer Dereference in Video

Buffer Copy Without Checking Size of Input in WLAN Firmware

Buffer Copy without Checking Size of Input in WLAN Firmware

Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder

Memory corruption due to buffer copy without checking the size of input in WLAN Firmware while processing CCKM IE in reassoc response frame

Memory corruption in video due to configuration weakness

memory corruption in video due to buffer overflow while parsing asf clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon…

Memory corruption in bluetooth due to integer overflow while processing HFP-UNIT profile in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Voice & Music

Memory corruption in bluetooth host due to integer overflow while processing BT HFP-UNIT profile in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon…

Buffer overflow in modem due to improper array index check before copying into it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…

Cryptographic Issues in BT Controller

Buffer Over-read in WLAN HOST

Improper Authentication in GPS HLOS Driver

An out-of-bounds read can occur while parsing a server certificate due to improper length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…

An Out of Bounds read may potentially occur while processing an IBSS beacon, in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon…

Possible out of bound read due to improper validation of IE length during SSID IE parse when channel is DFS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…

Possible buffer over read due to improper validation of frame length while processing AEAD decryption during ASSOC response in Snapdragon Auto, Snapdragon Compute, Snapdragon…

Improper Input Validation in Automotive OS Platform

Buffer Copy Without Checking Size of Input in Hypervisor

Integer Overflow to Buffer Overflow in TZ Secure OS

Buffer Over-read in WLAN HOST

Memory corruption due to buffer copy without checking the size of input in Core while sending SCM command to get write protection information

Accepting AMSDU frames with mismatched destination and source address can lead to information disclosure in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer…

Reusing a Nonce, Key Pair in Encryption in Automotive Platform

Buffer Copy Without Checking Size of Input in Boot

Use After Free in Graphics Linux

Improper Restriction of Operations within the Bounds of a Memory Buffer in Hypervisor

Possible integer overflow due to improper check of batch count value while sanitizer is enabled in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…

Improper access control in trusted application environment can cause unauthorized access to CDSP or ADSP VM memory with either privilege in Snapdragon Auto, Snapdragon Compute,…

Null pointer dereference can occur due to memory allocation failure in DIAG in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon…

Possible integer overflow due to improper length check while updating grace period and count record in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…

Buffer Over-read in WLAN Host Communication

Improper Input Validation in Automotive

Permissions, Privileges, and Access Controls in Video Analytics and Processing

Use After Free in Graphics

Integer Overflow or Wraparound in Data Network Stack & Connectivity