Buffer Copy Without Checking Size of Input in Video

Buffer Copy without Checking Size of Input (`Classic Buffer Overflow`) in Video

Untrusted Pointer Dereference in Video

Buffer Copy Without Checking Size of Input in QESL

Buffer Copy Without Checking Size of Input in QESL

Improper Validation of Array Index in Bluetooth HOST

Double free in Video

Memory corruption in video due to configuration weakness

Possible buffer overflow due to improper validation of SSID length received from beacon or probe response during an IBSS session in Snapdragon Auto, Snapdragon Compute, Snapdragon…

Possible out of bound read due to improper validation of certificate chain in SSL or Internet key exchange in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…

u'Buffer over-read while processing received L2CAP packet due to lack of integer overflow check' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…

Integer Overflow to Buffer Overflow in Bluetooth HOST

u'Buffer overflow while processing PDU packet in bluetooth due to lack of check of buffer length before copying into it.' in Snapdragon Auto, Snapdragon Compute, Snapdragon…

u'Buffer overflow while processing a crafted PDU data packet in bluetooth due to lack of check of buffer size before copying' in Snapdragon Auto, Snapdragon Compute, Snapdragon…

Out-of-bounds Read in Windows WLAN Host

Out-of-bounds Read in Windows WLAN Host

Stack-based Buffer Overflow in WLAN Windows Host

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Windows Host

Stack-based Buffer Overflow in WLAN Windows Host

Improper Restriction of Operations within the Bounds of a Memory Buffer in HLOS

Permissions, Privileges, and Access Control issues in TZ Secure OS

Buffer Copy Without Checking Size of Input in Trusted Execution Environment

Integer Overflow to Buffer Overflow in HLOS

Improper Restriction of Operations within the Bounds of a Memory Buffer in BT Controller

Improper Authorization in HLOS

Improper Restriction of Operations within the Bounds of a Memory Buffer in TZ Secure OS

Improper Validation of Array Index in HLOS

Stack-based Buffer Overflow in WIN Product

Incorrect Type Conversion or Cast in Core

Double free in Core

Buffer copy without checking the size of input in HLOS

Use after free in WLAN

Memory corruption due to use after free issue in kernel while processing ION handles in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…

Improper validation of program headers containing ELF metadata can lead to image verification bypass in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…

Possible null pointer dereference due to lack of TLB validation for user provided address in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…

Memory corruption due to improper input validation while processing IO control which is nonstandard in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics…

u'SMEM partition can be manipulated in case of any compromise on HLOS, thus resulting in access to memory outside of SMEM address range which could lead to memory corruption' in…

Close and bind operations done on a socket can lead to a Use-After-Free condition

Buffer Over-read in BT Controller

Reachable Assertion in WLAN Firmware

Buffer Over-read in Qualcomm ESL

Integer Overflow or Wraparound in Bluetooth Host

Buffer over-read in Bluetooth Host.

Information disclosure in WLAN due to improper validation of array index while parsing crafted ANQP action frames in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…

Out of bound read in WLAN HOST due to improper length check can lead to DOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics…

Possible buffer over read due to lack of size validation while unpacking frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics…

Improper Input Validation in Trusted Execution Environment

Key Management Errors in HLOS

Improper Authentication in HLOS.

Possible out of bound read due to lack of length check of data length for a DIAG event in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…