Improper Validation of Array Index in Multi-Mode Call Processor

Improper Input Validation in WLAN Resource Manager

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Audio

Improper Input Validation in WIN SON

Buffer Copy Without Checking Size of Input in Audio

Use of Out-of-range Pointer Offset in WLAN HOST

Use After Free in WLAN Host Communication

Buffer Copy Without Checking Size of Input in Data Modem

Use of Out-of-range Pointer Offset in WLAN HOST

Stack-based Buffer Overflow in WLAN HOST

Buffer Copy without Checking Size of Input in Data Modem

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Host

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Host

Buffer Copy Without Checking Size of Input in WLAN Firmware

Use of Out-of-range Pointer Offset in Multi-mode Call Processor

Use of Out-of-range Pointer Offset in Modem

Buffer Over-read in Data Modem

Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder

Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network

Memory corruption due to improper validation of array index in Multi-mode call processor

Memory corruption due to stack based buffer overflow in WLAN having invalid WNM frame length

Possible buffer overflow due to improper parsing of headers while playing the FLAC audio clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…

Possible buffer overflow due to improper validation of SSID length received from beacon or probe response during an IBSS session in Snapdragon Auto, Snapdragon Compute, Snapdragon…

Improper buffer size validation of DSM packet received can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…

Possible buffer overflow due to lack of parameter length check during MBSSID scan IE parse in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile,…

u'Buffer Overflow issue in WLAN tcp ip verification due to usage of out of range pointer offset' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…

u'Buffer overflow while parsing PMF enabled MCBC frames due to frame length being lesser than what is expected while parsing' in Snapdragon Auto, Snapdragon Compute, Snapdragon…

u'Buffer Overflow in mic calculation for WPA due to copying data into buffer without validating the length of buffer' in Snapdragon Auto, Snapdragon Compute, Snapdragon…

Possible out of bound access in WLAN handler when the received value of length in rx path is shorter than the expected value of country IE in Snapdragon Compute, Snapdragon…

Buffer overflow in WLAN firmware while parsing GTK IE containing GTK key having length more than the buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…

Buffer overflow can occur in In WLAN firmware while unwraping data using CCMP cipher suite during parsing of EAPOL handshake frame in Snapdragon Auto, Snapdragon Compute,…

Potential buffer overflow while processing CBF frames due to lack of check of buffer length before copy in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics…

Possible buffer overflow while handling NAN reception of NMF in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity,…

Buffer overflow can occur in function wlan firmware while copying association frame content if frame length is more than the maximum buffer size in case of SAP mode in Snapdragon…

Possible buffer overflow in WLAN handler due to lack of validation of destination buffer size before copying it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…

Possible buffer overflow in WLAN handler due to lack of validation of destination buffer size before copying into it in Snapdragon Auto, Snapdragon Compute, Snapdragon…

Possible buffer overflow in WLAN Parser due to lack of length check when copying data in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…

While parsing Service Descriptor Extended Attribute received as part of SDF frame, there is a possibility that incorrect length is specified in the attribute length field of…

Buffer overflow can occur while parsing RSN IE containing list of PMK ID`s which are more than the buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…

Buffer overflow can occur in WLAN firmware while parsing beacon/probe_response frames during roaming in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…

Kernel can do a memory read from arbitrary address passed by user during execution of a syscall in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon…

Buffer overflow in WLAN NAN function due to lack of check of count value received in NAN availability attribute in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…

Possible buffer overflow issue due to lack of length check when parsing the extended cap IE header length in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics…

Lack of check to prevent the buffer length taking negative values can lead to stack overflow

Improper Authentication in GPS_GNSS

Buffer Over-read in Multi-Mode Call Processor

Cryptographic Issues in BT Controller

Buffer Over-read in WLAN HOST

Buffer Copy Without Checking Size of Input in Modem

Improper Authentication in GPS HLOS Driver