Use After Free in HLOS

Use After Free in Graphics

Double Free in Data Network Stack & Connectivity

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Radio Interface Layer

Buffer Copy Without Checking Size of Input in WLAN Host

Buffer Copy Without Checking Size of Input in WLAN Host

Use After Free in Audio

Use After Free in Camera

Improper Restriction of Operations within the Bounds of a Memory Buffer in Radio Interface Layer

Use After Free in Audio

Improper Restrictions of Operations within the Bounds of a Memory Buffer in Display

Integer Overflow or Wraparound in Display

Improper Restriction of Operations within the Bounds of a Memory Buffer in Audio

Integer Overflow to Buffer Overflow in RIL

Improper Validation of Array Index in Linux

Improper Validation of Array Index in Audio

Buffer over-read in Modem

Multiple Dmabuf Kernel Address UAF Vulnerability

Multiple Type Confusion Vulnerability

Improper Validation of Array Index in GPS HLOS Driver

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN

Integer Overflow to Buffer Overflow in RIL

Incorrect Type Conversion or Cast in Trusted Execution Environment

Use After Free in Audio

Buffer Copy Without Checking the Size of Input in Audio

Improper Restrictions of Operations within the Bounds of a Memory Buffer in Linux

Buffer Copy without Checking Size of Input in Data Network Stack & Connectivity

Use after free in Core

Buffer copy without checking the size of input in FM Host

Double free in Linux-Android

Buffer copy without checking the size of input in Core

Integer Overflow in Multimedia Framework

Incorrect type conversion or cast in Audio

Use after free in Modem

Buffer copy without checking the size of input in Linux Kernel

Improper Validation of Array Index in Automotive Android OS

Stack based buffer overflow in Core

Improper input validation in Automotive Android OS

Memory corruption in camera due to improper validation of array index in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon…

Memory corruption in camera due to buffer copy without checking size of input in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon…

Possible integer overflow and memory corruption due to improper validation of buffer size sent to write to console when computing the payload size in Snapdragon Auto, Snapdragon…

Memory corruption in audio module due to integer overflow in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Mobile, Snapdragon Wearables

Memory corruption in audio while playing record due to improper list handling in two threads in Snapdragon Connectivity, Snapdragon Mobile, Snapdragon Wearables

Memory corruption in graphics support layer due to use after free condition in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon…

Possible buffer overflow due to improper validation of array index while processing external DIAG command in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…

Use after free in graphics fence due to a race condition while closing fence file descriptor and destroy graphics timeline simultaneously in Snapdragon Auto, Snapdragon Compute,…

Use After Free in WLAN Host

Buffer Over-read in WLAN Host Communication

Buffer Over-read in WLAN Host

Buffer Over-read in WLAN Host