Buffer copy without checking the size of input in Core

Buffer Over-read in Multi Mode Call Processor

Untrusted Pointer Dereference in Camera

Out-of-bounds Write in Display

Buffer Over-read in Camera

Use After Free in Camera

Double Free in Display

Use After Free in Display

Buffer Over-read in Display

Out-of-bounds Read in Windows WLAN Host

Out-of-bounds Read in Windows WLAN Host

Out-of-bounds Read in Windows WLAN Host

Out-of-bounds Read in Windows WLAN Host

Improper Validation of Array Index in Display

Buffer Over-read in Display

Stack-based Buffer Overflow in WLAN Windows Host

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Windows Host

Improper Input Validation in Camera

Improper Restriction of Operations withing the Bounds of a Memory Buffer in DSP Services

Improper Input Validation in Secure Processor

Integer Overflow to Buffer Overflow in Graphics Windows

NULL Pointer Dereference in Windows Graphics

Integer Overflow or Wraparound in Radio Interface Layer

Stack-based Buffer Overflow in WIN Product

Memory corruption occurs while processing command received from HLOS due to improper length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…

Memory corruption in audio due to lack of check of invalid routing address into APR Routing table in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…

Possible buffer overflow due to improper validation of FTM command payload in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon…

Possible buffer over read occurs due to lack of length check of request buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon…

Buffer Over-read in WLAN Embedded SW

Reachable Assertion in Data Modem

Improper Release of Memory Before Removing Last Reference in Data Modem

Buffer Over-read in Data Modem

Improper authorization of a replayed LTE security mode command can lead to a denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…

Possible memory leak due to improper validation of certificate chain length while parsing server certificate chain in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…

Time-of-check Time-of-use (TOCTOU) Race Condition in Display

Time-of-check Time-of-use (TOCTOU) Race Condition in Camera

Time-of-check Time-of-use (TOCTOU) Race Condition in Camera

While waiting for a response to a callback or listener request, non-secure clients can change permissions to shared memory buffers used by HLOS Invoke Call to secure kernel in…