Buffer Copy Without Checking Size of Input in WLAN Host

Use After Free in Audio

Use After Free in Camera

Improper Restriction of Operations within the Bounds of a Memory Buffer in Radio Interface Layer

Use After Free in Audio

Improper Input Validation in Core

Improper Access Control in Core

Improper Restrictions of Operations within the Bounds of a Memory Buffer in Display

Integer Overflow or Wraparound in Display

Improper Restriction of Operations within the Bounds of a Memory Buffer in Audio

Integer Overflow to Buffer Overflow in RIL

Improper Validation of Array Index in Linux

Improper Validation of Array Index in Audio

Buffer over-read in Modem

Multiple Dmabuf Kernel Address UAF Vulnerability

Multiple Type Confusion Vulnerability

Improper Validation of Array Index in GPS HLOS Driver

Integer Overflow to Buffer Overflow in RIL

Incorrect Type Conversion or Cast in Trusted Execution Environment

Use After Free in Audio

Permissions, Privileges, and Access Controls in Display

Buffer Copy Without Checking Size of Input in Linux

Buffer Copy Without Checking the Size of Input in Audio

Incorrect Type Conversion or Cast in Video

Improper Restrictions of Operations within the Bounds of a Memory Buffer in Linux

Buffer Copy without Checking Size of Input in Data Network Stack & Connectivity

Use after free in Core

Buffer copy without checking the size of input in FM Host

Buffer copy without checking the size of input in Core

Buffer copy without checking the size of input in Core

Improper validation of array index in computer vision.

Improper Restriction of Operations within the Bounds of a Memory Buffer in Automotive

Integer Overflow in Multimedia Framework

Incorrect type conversion or cast in Audio

Buffer copy without checking the size of input in Linux Kernel

Improper Validation of Array Index in Automotive Android OS

Stack based buffer overflow in Core

Improper input validation in Automotive Android OS

Memory corruption in SPI buses due to improper input validation while reading address configuration from spi buses in Snapdragon Mobile, Snapdragon Wearables

Memory corruption in camera due to buffer copy without checking size of input in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon…

Memory corruption in camera due to improper validation of array index in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon…

Memory corruption in i2c buses due to improper input validation while reading address configuration from i2c driver in Snapdragon Mobile, Snapdragon Wearables

Memory corruption in Qualcomm IPC due to buffer copy without checking the size of input while starting communication with a compromised kernel

Memory corruption in multimedia due to use after free during callback registration failure in Snapdragon Mobile

Memory corruption in graphics due to use-after-free in graphics dispatcher logic in Snapdragon Mobile

Memory corruption in graphics due to use-after-free while graphics profiling in Snapdragon Connectivity, Snapdragon Mobile

Memory corruption in synx driver due to use-after-free condition in the synx driver due to accessing object handles without acquiring lock in Snapdragon Compute, Snapdragon…

Memory corruption in kernel due to use after free issue in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

Memory corruption in audio while playing record due to improper list handling in two threads in Snapdragon Connectivity, Snapdragon Mobile, Snapdragon Wearables

Memory corruption in audio module due to integer overflow in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Mobile, Snapdragon Wearables