Incorrect Authorization in Graphics

Use After Free in DSP Service

Use After Free in Graphics

Buffer Copy Without Checking Size of Input in Powerline Communication Firmware

Buffer Copy Without Checking Size of Input in Data Modem

Memory corruption in Data Modem when a non-standard SDP body, during a VOLTE call

Memory corruption in Modem while processing security related configuration before AS Security Exchange

Memory corruption due to improper validation of array index in Multi-mode call processor

Memory corruption in Bluetooth HOST due to stack-based buffer overflow when when extracting data using command length parameter in Snapdragon Connectivity, Snapdragon Mobile

Improper Authentication in GPS_GNSS

Cryptographic Issues in BT Controller

Buffer Copy Without Checking Size of Input in Modem

Buffer Copy Without Checking Size of Input in Secure Processor

Improper Validation of Array Index in Secure Processor

Buffer Copy Without Checking Size of Input in Hypervisor

Memory corruption in WLAN HOST while processing the WLAN scan descriptor list

Memory corruption due to access of uninitialized pointer in Bluetooth HOST while processing the AVRCP packet

Buffer copy in GATT multi notification due to improper length check for the data coming over-the-air in Snapdragon Connectivity, Snapdragon Industrial IOT

Possible memory corruption in RPM region due to improper XPU configuration in Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired…

Reusing a Nonce, Key Pair in Encryption in Automotive Platform

Use After Free in Graphics Linux

Improper access control in trusted application environment can cause unauthorized access to CDSP or ADSP VM memory with either privilege in Snapdragon Auto, Snapdragon Compute,…

Buffer Over-read in Data Network Stack & Connectivity

Buffer Over-read in Data Network Stack & Connectivity

An integer overflow due to improper check performed after the address and size passed are aligned in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…

Improper integrity check can lead to race condition between tasks PDCP and RRC? right after a valid RRC Command packet has been received in Snapdragon Auto, Snapdragon Compute,…

Use After Free in DSP Service

Use After Free in Computer Vision

Use After Free in Computer Vision

Out-of-bounds Write in DSP Service

Out-of-bounds Write in HLOS

Buffer Over-read in Camera

Buffer Over-read in Camera

Buffer Over-read in Camera

Buffer Over-read in Camera

Buffer Over-read in Camera

Heap-Based Buffer Overflow in Power Management IC

Buffer Over-read in WinBlast Driver

Stack-based Buffer Overflow in Camera Driver

Buffer Copy Without Checking Size of Input in Automotive Platform

Improper Access Control for Register Interface in SCE-Mink

Improper Release of Memory Before Removing Last Reference in Graphics

Double Free in Graphics

Buffer Copy Without Checking Size of Input in DSP Service

Buffer Copy without Checking Size of Input in DSP Service

Use After Free in HLOS

Incorrect Authorization in Boot

Out-of-bounds Write in Audio

Use After Free in Video

Use After Free in DSP Service