Buffer Copy Without Checking Size of Input in Audio

Use After Free in DSP Service

Improper Input Validation in HLOS

Improper Validation of Array Index in HLOS

Improper Access Control in Core

Improper Access Control in Kernel

Use After Free in Graphics

Improper Validation of Array Index in WLAN HAL

Buffer Copy without Checking the Size of Input(Classic Buffer Overflow) in Core Platform

Buffer Copy without Checking the Size of Input(Classic Buffer Overflow) in Core Platform

Multiple Type Confusion Vulnerability

Integer Overflow or Wraparound in Audio

Integer Overflow or Wraparound in Audio

Incorrect Type Conversion or Cast in Core

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN

Buffer Over-read in WLAN HOST

Stack-based Buffer Overflow in WLAN HOST

Buffer Copy Without Checking Size of Input in WLAN HOST

Integer Overflow or Wraparound in Audio

Improper Access control in GPU Subsystem

Improper Input Validation in WLAN HOST

Double free in Core

Stack-based buffer overflow in Modem

Improper Release of Memory Before Removing Last Reference (`Memory Leak`) in Graphics

Incorrect Type Conversion or Cast in Graphics

Improper Restriction of Operations within the Bounds of a Memory Buffer in Automotive

Integer overflow to buffer overflow in Modem

Integer overflow or wraparound in Core

Double free in Core

Memory corruption due to buffer copy without checking the size of input in HLOS when input message size is larger than the buffer capacity

Memory corruption in modem due to use of out of range pointer offset while processing qmi msg

Memory corruption in User Identity Module due to integer overflow to buffer overflow when a segement is received via qmi http

Memory corruption due to improper access control in Qualcomm IPC

Memory corruption due to buffer copy without checking size of input while running memory sharing tests with large scattered memory

Memory corruption due to stack-based buffer overflow in Core

Memory corruption in core due to stack-based buffer overflow

Memory corruption in Core due to stack-based buffer overflow

Memory corruption due to buffer copy without checking size of input in modem while receiving WMI_REQUEST_STATS_CMDID command

Memory corruption in Audio due to integer overflow to buffer overflow while music playback of clips like amr,evrc,qcelp with modified content

Memory corruption in kernel due to missing checks when updating the access rights of a memextent mapping

Memory corruption in video driver due to type confusion error during video playback

Memory corruption in display due to double free while allocating frame buffer memory

Memory corruption in display driver due to incorrect type casting while accessing the fence structure fields

Memory corruption in camera due to improper validation of array index in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon…

Possible memory corruption in kernel while performing memory access due to hypervisor not correctly invalidated the processor translation caches in Snapdragon Auto, Snapdragon…

Memory corruption in diag due to use after free while processing dci packet in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon…

Memory corruption in graphics due to use-after-free while importing graphics buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…

Memory corruption in graphics due to buffer overflow while validating the user address in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…

Memory corruption due to double free issue in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

Memory corruption due to untrusted pointer dereference in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile