Use of Out-of-range Pointer Offset in Graphics

Qualcomm Multiple Chipsets Use-After-Free Vulnerability

Buffer Copy Without Checking Size of Input in Hypervisor

Memory corruption due to buffer copy without checking the size of input in Core while sending SCM command to get write protection information

Memory corruption due to access of uninitialized pointer in Bluetooth HOST while processing the AVRCP packet

Memory corruption in Bluetooth HOST due to buffer overflow while parsing the command response received from remote

Improper handling of permissions of a shared memory region can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…

Information disclosure due to buffer over-read in Bluetooth HOST while pairing and connecting A2DP

Buffer Copy Without Checking Size of Input in Automotive Audio

Use After Free in Automotive Audio

Exposed Dangerous Method or Function in HLOS

Use After Free in Video

Out-of-bounds Write in Computer Vision

NULL Pointer Dereference in Display

Improper Validation of Array Index in Camera

Use After Free in Computer Vision

Use After Free in Graphics Linux

Integer Overflow or Wraparound in Automotive GPU

Improper Restriction of Operations within the Bounds of a Memory Buffer in Automotive

Use After Free in Graphics Linux

Buffer Over-read in Trusted Execution Environment

Integer Overflow or Wraparound in Core Services

Use After Free in Automotive Multimedia

Use After Free in Automotive Multimedia

Use After Free in Automotive Audio

Use After Free in Audio

Use after free in Neural Processing Unit

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Kernel

Use After Free in Linux Graphics

Buffer Copy Without Checking Size of Input (Classic Buffer Overflow) in Wearables

Buffer Copy without Checking Size of Input (`Classic Buffer Overflow`) in Core

Use of Out-of-range Pointer Offset in Audio

Buffer Copy Without Checking Size of Input in Audio

Buffer Copy Without Checking Size of Input in Audio

Signed-to-unsigned conversion error in Audio

Use After Free in DSP Service

Improper Access Control in Kernel

Use After Free in Graphics

Stack-based Buffer Overflow in WIN Product

Buffer Copy without Checking the Size of Input(Classic Buffer Overflow) in Core Platform

Buffer Copy without Checking the Size of Input(Classic Buffer Overflow) in Core Platform

Incorrect Type Conversion or Cast in Core

Memory Corruption in GPU Subsystem due to arbitrary command execution from GPU in privileged mode

Memoru corruption in Audio when ADSP sends input during record use case

Memory Corruption in Graphics while accessing a buffer allocated through the graphics pool

Memory corruption due to improper authentication in Qualcomm IPC while loading unsigned lib in audio PD

Memory corruption due to buffer copy without checking size of input while running memory sharing tests with large scattered memory

Memory corruption due to stack-based buffer overflow in Core

Memory corruption in Automotive Android OS due to improper input validation

Memory corruption in kernel due to missing checks when updating the access rights of a memextent mapping