Memory corruption while validating the TID to Link Mapping action request frame, when a station connects to an access point

Memory corruption when AP includes TID to link mapping IE in the beacons and STA is parsing the beacon TID to link mapping IE

Memory corruption in Modem while processing security related configuration before AS Security Exchange

Stack-based Buffer Overflow in WLAN Firmware

Buffer Over-read in Multi-Mode Call Processor

Cryptographic Issues in BT Controller

Buffer Over-read in WLAN HOST

Information disclosure in Modem while processing SIB5

Integer Overflow or Wraparound in GPS

Buffer Over-read in WLAN Host Communication

Missing Authentication for Critical Function in Data Modem

Buffer Copy Without Checking Size of Input in Automotive Platform

Use After Free in Automotive Audio

Out-of-bounds Write in HLOS

Use After Free in NPU

Use of Out-of-range Pointer Offset in Trust Management Engine

Use After Free in GPS

Integer Overflow to Buffer Overflow in Audio

Use After Free in Automotive GPU

Improper Restriction of Operations within the Bounds of a Memory Buffer in HLOS

Use After Free in Qualcomm IPC

Improper Restriction of Operations within the Bounds of a Memory Buffer in HLOS

Improper Restriction of Operations within the Bounds of a Memory Buffer in Automotive

Integer Overflow or Wraparound in WLAN HOST

Use After Free in Audio

Use After Free in HLOS

Memory corruption while sending SMS from AP firmware

Memory corruption in WLAN Host while setting the PMK length in PMK length in internal cache

Memory Corruption in Audio while invoking IOCTLs calls from the user-space

Memory corruption in core services when Diag handler receives a command to configure event listeners

Exposure of Sensitive System Information to an Unauthorized Control Sphere in KERNEL

Improper Validation of Syntactic Correctness of Input in Automotive Linux OS

Buffer Over-read in WLAN HAL

Buffer Over-read in Multi Mode Call Processor

Buffer Over-read in WLAN Host Communication

Buffer Over-read in Multi Mode Call Processor

Buffer Over-read in WLAN Host

Buffer Over-read in WLAN Host

Buffer Over-read in WLAN Host

Buffer Over-read in Multi Mode Call Processor

Loop with Unreachable Exit Condition (`Infinite Loop`) in Multi Mode Call Processor

Buffer Over-read in Audio

Buffer Over-read in WLAN HOST

Improper Validation of Syntactic Correctness of Input in Display

Stack-based Buffer Overflow in Display

Cryptographic Issues in Core

Exposure of Sensitive System Information to an Unauthorized Control Sphere in HLOS

Improper Input Validation in RIL

Buffer Copy without Checking Size of Input (`Classic Buffer Overflow`) in Performance

Reachable Assertion in BT Controller