Untrusted Pointer Dereference in TZ Firmware

Use of Out-of-range Pointer Offset in TZ Firmware

Access of uninitialized pointer in Bluetooth HOST

Integer Overflow to Buffer Overflow in Bluetooth HOST

Buffer Over-read in WLAN Host Communication

Information disclosure due to buffer over-read in Bluetooth HOST while pairing and connecting A2DP

Use After Free in Camera Driver

Use After Free in BTHOST

Use of Out-of-range Pointer Offset in Camera Driver

Use After Free in HLOS

Use After Free in HLOS

Time-of-check Time-of-use (TOCTOU) Race Condition in Camera

Use After Free in MProc

Improper Access Control in Graphics Linux

Improper Restriction of Operations within the Bounds of a Memory Buffer in HLOS

Use After Free in HLOS

Buffer Copy Without Checking Size of Input in HLOS

Buffer Copy Without Checking Size of Input in Audio

Buffer Copy Without Checking Size of Input in Audio

Use of Out-of-range Pointer Offset in Audio

Integer Overflow or Wraparound in TZ Secure OS

Improper Restriction of Operations within the Bounds of a Memory Buffer in BT Controller

Use After Free in Camera

Buffer Copy Without Checking Size of Input in Automotive Audio

Buffer Copy without Checking Size of Input in Audio

Buffer Copy without Checking the Size of Input(Classic Buffer Overflow) in Core Platform

Buffer Copy without Checking the Size of Input(Classic Buffer Overflow) in Core Platform

Improper Restriction of Operations within the Bounds of a Memory Buffer in Audio

Multiple Dmabuf Kernel Address UAF Vulnerability

Multiple Type Confusion Vulnerability

Integer Overflow or Wraparound in Audio

Integer Overflow or Wraparound in Audio

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN

Buffer Over-read in WLAN HOST

Integer Overflow or Wraparound in Audio

Improper Access control in GPU Subsystem

Improper access control in Kernel

Double free in Linux Networking

Improper Release of Memory Before Removing Last Reference (`Memory Leak`) in Graphics

Use after free in WLAN

Improper authentication in Qualcomm IPC

Use of out-of-range pointer offset in Audio

Integer overflow to buffer overflow in Audio

Incorrect Type Conversion in Video driver

Use-After-Free Issue in Display

Incorrect type casting in Display driver

Memory corruption in camera due to improper validation of array index in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon…

Cryptographic issues in BSP due to improper hash verification in Snapdragon Wired Infrastructure and Networking

Memory corruption in BT controller due to improper length check while processing vendor specific commands in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…

Possible unauthorized access to secure space due to improper check of data allowed while flashing the no access control device configuration in Snapdragon Auto, Snapdragon…