Improper Input Validation in Services

Possible authentication bypass due to improper order of signature verification and hashing in the signature verification call in Snapdragon Auto, Snapdragon Compute, Snapdragon…

Buffer overflow in sahara protocol while processing commands leads to overwrite of secure configuration data in Snapdragon Mobile, Snapdragon Compute, Snapdragon Auto, Snapdragon…

Out-of-bounds Write in Camera Driver

Buffer Copy Without Checking Size of Input in Camera Driver

Exposure of Sensitive System Information to an Unauthorized Control Sphere in HLOS

Use After Free in DSP Service

Possible memory corruption due to improper validation of memory address while processing user-space IOCTL for clearing Filter and Route statistics in Snapdragon Auto, Snapdragon…

Possible buffer overflow due to lack of length check of source and destination buffer before copying in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon…

Possible use-after-free due to lack of validation for the rule count in filter table in IPA driver in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…

Buffer Overflow while processing IOCTL for getting peripheral endpoint information there is no proper validation for input maximum endpoint pair and its size in Snapdragon Auto,…

Possible buffer overflow due to lack of offset length check while updating the buffer value in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…

Buffer Over-read in WLAN Firmware

Reachable Assertion in BT Controller

Buffer Over-read in WLAN Host

Buffer Over-read in WLAN Firmware

Use After Free in WLAN Host Communication

Information disclosure due to buffer over-read in WLAN while parsing BTM action frame

Information disclosure due to buffer over-read in WLAN while WLAN frame parsing due to missing frame length check

Information disclosure due to buffer over-read in Bluetooth HOST while processing GetFolderItems and GetItemAttribute Cmds from peer device

Improper handling of ASB-C broadcast packets with crafted opcode in LMP can lead to uncontrolled resource consumption in Snapdragon Auto, Snapdragon Compute, Snapdragon…

Improper handling of ASB-U packet with L2CAP channel ID by slave host can lead to interference with piconet in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…

A race condition in fastrpc kernel driver for dynamic process creation can lead to use after free scenario in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Mobile,…

While processing storage SCM commands there is a time of check or time of use window where a pointer used could be invalid at a specific time while executing the storage SCM call…

Weak Authentication in HLOS

Buffer Over-read in Automotive Software platform based on QNX

Buffer Over-read in Video

Buffer Copy Without Checking Size of Input in Automotive Vehicle Networks

Improper Authorization in SPS-HLOS

Buffer Over-read in Automotive OS Platform

Buffer Over-read in Automotive Autonomy

Buffer Over-read in Automotive Autonomy

Buffer Over-read in FM Host

NULL Pointer Dereference in HLOS

Cryptographic Issues in Automotive

NULL Pointer Dereference in Hypervisor

Improper Authentication in Automotive OS

Buffer Over-read in WLAN HAL

Buffer Over-read in WLAN HAL

Buffer Over-read in Qualcomm IPC

Buffer Over-read in WLAN Host

Buffer Over-read in WLAN HOST

Transient DOS due to untrusted Pointer Dereference in core while sending USB QMI request

Information disclosure in Kernel due to indirect branch misprediction

Information disclosure due to buffer over-read in Trusted Execution Environment while QRKS report generation

Transient Denial-of-service in Automotive due to improper input validation while parsing ELF file

Information disclosure due to buffer overread in Core

Information disclosure due to buffer overread in Core

Transient DOS due to buffer over-read in WLAN while parsing corrupted NAN frames

Information disclosure due to buffer over-read in WLAN while handling IBSS beacons frame