Stack-based Buffer Overflow in WLAN Windows Host

Buffer Copy Without Checking Size of Input in WLAN Windows Host

Use After Free in Qualcomm IPC

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Computer Vision

Buffer Over-read in Display

Double Free in Data Network Stack & Connectivity

Buffer Copy Without Checking Size of Input in WLAN Host

Buffer Copy Without Checking Size of Input in WLAN Host

Use After Free in Camera

Improper Restriction of Operations within the Bounds of a Memory Buffer in Radio Interface Layer

Improper Restrictions of Operations within the Bounds of a Memory Buffer in Display

Integer Overflow or Wraparound in Display

Improper Restriction of Operations within the Bounds of a Memory Buffer in Audio

Integer Overflow to Buffer Overflow in RIL

Improper Validation of Array Index in Linux

Buffer over-read in Modem

Multiple Dmabuf Kernel Address UAF Vulnerability

Multiple Type Confusion Vulnerability

Improper Validation of Array Index in GPS HLOS Driver

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN

Integer Overflow to Buffer Overflow in RIL

Incorrect Type Conversion or Cast in Trusted Execution Environment

Improper Restrictions of Operations within the Bounds of a Memory Buffer in Linux

Buffer Copy without Checking Size of Input in Data Network Stack & Connectivity

Improper restriction of operations within the bounds of memory buffer in Linux

Use after free in Core

Buffer copy without checking the size of input in FM Host

Double free in Linux-Android

Buffer copy without checking the size of input in Core

Buffer copy without checking the size of input in Core

Use after free in Modem

Stack based buffer overflow in Core

Use after free in WLAN

Use after free in Trusted Application Environment

Incorrect Type Conversion in Video driver

Use-After-Free Issue in Display

Incorrect type casting in Display driver

Memory corruption in SPI buses due to improper input validation while reading address configuration from spi buses in Snapdragon Mobile, Snapdragon Wearables

Memory corruption in camera due to improper validation of array index in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon…

Memory corruption in camera due to buffer copy without checking size of input in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon…

Memory corruption in i2c buses due to improper input validation while reading address configuration from i2c driver in Snapdragon Mobile, Snapdragon Wearables

Buffer overflow can occur due to improper validation of NDP application information length in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity,…

Possible out of bound read due to lack of domain input validation while processing APK close session request in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…

Possible out of bound access due to improper validation of item size and DIAG memory pools data while switching between USB and PCIE interface in Snapdragon Auto, Snapdragon…

Possible out of bound memory access due to improper boundary check while creating HSYNC fence in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon…

Use after free can occur due to improper handling of response from firmware in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon…

Buffer Over-read in Multi-Mode Call Processor

Buffer Over-read in WLAN Host

Buffer Over-read in Multi Mode Call Processor

Buffer Over-read in Multi Mode Call Processor