Improper Restriction of Operations within the Bounds of a Memory Buffer in Data Network Stack & Connectivity

Buffer Copy Without Checking Size of Input in Data Modem

Use of Out-of-range Pointer Offset in WLAN HOST

Stack-based Buffer Overflow in WLAN HOST

Memory corruption in Modem while processing security related configuration before AS Security Exchange

Memory corruption while handling payloads from remote ESL

Possible buffer overflow due to lack of parameter length check during MBSSID scan IE parse in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics…

Stack-based Buffer Overflow in WLAN Firmware

Buffer Over-read in Multi-Mode Call Processor

Cryptographic Issues in BT Controller

Buffer Over-read in WLAN HOST

Buffer Copy Without Checking Size of Input in Modem

Memory corruption due to lack of validation of pointer arguments passed to Trustzone BSP in Snapdragon Wired Infrastructure and Networking

Memory corruption due to lack of validation of pointer arguments passed to Trustzone BSP in Snapdragon Wired Infrastructure and Networking

Memory corruption due to lack of validation of pointer arguments passed to TrustZone BSP in Snapdragon Wired Infrastructure and Networking

Memory corruption due to lack of check of validation of pointer to buffer passed to trustzone in Snapdragon Wired Infrastructure and Networking

Improper access control in trusted application environment can cause unauthorized access to CDSP or ADSP VM memory with either privilege in Snapdragon Auto, Snapdragon Compute,…

Possible integer overflow due to improper length check while updating grace period and count record in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…

Buffer Over-read in Data Network Stack & Connectivity

Buffer Over-read in WLAN Host Communication

Missing Authentication for Critical Function in Data Modem

Buffer Over-read in Windows Compute

Buffer Over-read in Camera

Buffer Over-read in Camera

Buffer Over-read in Camera

Buffer Over-read in Camera

Buffer Over-read in WinBlast Driver

Buffer Copy Without Checking Size of Input in Automotive Platform

Use After Free in Automotive Audio

Use After Free in Secure Processor

Use of Uninitialized Variable in HLOS

Untrusted Pointer Dereference in Camera

Out-of-bounds Write in Audio

Use After Free in Camera

Double Free in Video

Improper Validation of Array Index in Bluetooth HOST

Use After Free in NPU

Buffer Over-read in Camera

Buffer Copy Without Checking Size of Input in Core Services

Use After Free in Camera

Double Free in Display

Use After Free in Display

Improper Validation of Array Index in Automotive Autonomy

Buffer Over-read in Display

Improper Access Control in Camera Driver

Detection of Error Condition Without Action in Hypervisor

Out-of-bounds Read in Windows WLAN Host

Out-of-bounds Read in Windows WLAN Host

Improper Validation of Array Index in Display

Buffer Over-read in Display