Cryptographic issues in BSP due to improper hash verification in Snapdragon Wired Infrastructure and Networking

Memory corruption in BT controller due to improper length check while processing vendor specific commands in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…

Possible unauthorized access to secure space due to improper check of data allowed while flashing the no access control device configuration in Snapdragon Auto, Snapdragon…

Improper cleaning of secure memory between authenticated users can lead to face authentication bypass in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…

Possible out of bound access due to improper validation of item size and DIAG memory pools data while switching between USB and PCIE interface in Snapdragon Auto, Snapdragon…

Possible out of bound write in RAM partition table due to improper validation on number of partitions provided in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…

Possible integer overflow in page alignment interface due to lack of address and size validation before alignment in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…

Possible integer overflow in access control initialization interface due to lack and size and address validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…

Buffer Over-read in WLAN HAL

Reachable Assertion in WLAN Firmware

Buffer Over-read in WLAN HAL

Buffer Over-read in WLAN Firmware

Integer Overflow or Wraparound in WLAN Host Communication

Buffer Over-read in WLAN Host Communication

Buffer Over-read in WLAN Host Communication

Buffer Over-read in Audio

Buffer Over-read in WLAN Host Communication

Buffer Over-read in WLAN HOST

Integer Underflow (Wrap or Wraparound) in WLAN Host Communication

Buffer Over-read in Video

Integer Overflow or Wraparound in Bluetooth Host

Buffer Over-read in WLAN Firmware

Buffer Over-read in WLAN HOST

Buffer Over-read in WLAN Firmware

Buffer over-read in Bluetooth Host.

Buffer Over-read in WLAN

Buiffer over-read in WLAN Firmware.

Uncontrolled resource consumption in WLAN Firmware.

Transient DOS due to null pointer dereference in Bluetooth HOST while receiving an attribute protocol PDU with zero length data

Transient DOS in Bluetooth HOST due to null pointer dereference when a mismatched argument is passed

Transient DOS due to buffer over-read in WLAN firmware while parsing cipher suite info attributes

Buffer Over-read in Audio

Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Linux

Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Kernel Driver

Improper Restriction of Operations within the Bounds of a Memory Buffer in Storage

Use After Free in Video

Use of Out-of-range Pointer Offset in Camera Driver

Improper Validation of Array Index in Camera_Linux

Improper access control sequence for AC database after memory allocation can lead to possible memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…

Buffer Copy Without Checking Size of Input in Audio

Use After Free in Data Network Stack & Connectivity

Out-of-bounds Write in Audio

Use After Free in HLOS

Out-of-bounds Read in Core

Out-of-bounds Read in Core

Improper Access Control for Register Interface in TZ Firmware

Use After Free in WLAN Host Communication

Buffer Over-read in Bluetooth HOST

Improper Input Validation in Bluetooth HOST

Information disclosure due to buffer over-read in Bluetooth HOST while processing GetFolderItems and GetItemAttribute Cmds from peer device