Incorrect Authorization in Graphics

Incorrect Authorization in Graphics Windows

Integer Overflow or Wraparound in Graphics Linux

Use After Free in DSP Services

Qualcomm Multiple Chipsets Improper Input Validation Vulnerability

Qualcomm Multiple Chipsets Use-After-Free Vulnerability

Memory corruption while loading an ELF segment in TEE Kernel

Memory corruption due to buffer copy without checking the size of input in Core while sending SCM command to get write protection information

Memory corruption in modem due to buffer overflow while processing a PPP packet

Memory corruption in Bluetooth HOST due to buffer overflow while parsing the command response received from remote

Buffer copy in GATT multi notification due to improper length check for the data coming over-the-air in Snapdragon Connectivity, Snapdragon Industrial IOT

Improper handling of permissions of a shared memory region can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…

Possible memory corruption while processing EAPOL frames due to lack of validation of key length before using it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…

User can overwrite Security Code NV item without knowing current SPC due to improper validation of SPC code setting and device lock in Snapdragon Auto, Snapdragon Compute,…

Possible integer overflow due to improper check of batch count value while sanitizer is enabled in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…

Improper access control in trusted application environment can cause unauthorized access to CDSP or ADSP VM memory with either privilege in Snapdragon Auto, Snapdragon Compute,…

Null pointer dereference can occur due to memory allocation failure in DIAG in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon…

Possible integer overflow due to improper length check while updating grace period and count record in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…

An improper free of uninitialized memory can occur in DIAG services in Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile

Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length

Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet

Information disclosure while decoding this RTP packet Payload when UE receives the RTP packet from the network

Information disclosure when an invalid RTCP packet is received during a VoLTE/VoWiFi IMS call

Information disclosure may occur while processing goodbye RTCP packet from network

Information disclosure may occur while decoding the RTP packet with invalid header extension from network

Buffer Over-read in Multi Mode Call Processor

Missing Authorization in Core

Buffer Over-read in Windows Compute

Buffer Over-read in Camera

Buffer Over-read in Camera

Buffer Over-read in Camera

Buffer Over-read in Camera

Buffer Over-read in WinBlast Driver

Memory Corruption when multiple threads simultaneously access a memory free API

Memory corruption while processing identity credential operations in the trusted application

Memory Corruption when processing IOCTLs for JPEG data without verification

Memory corruption while processing MFC channel configuration during music playback

Memory corruption while processing a malformed license file during reboot

Memory corruption during PlayReady APP usecase while processing TA commands

Memory corruption while encoding the image data

Memory corruption due to double free when multiple threads race to set the timestamp store

memory corruption while loading a PIL authenticated VM, when authenticated VM image is loaded without maintaining cache coherency

Memory corruption while performing private key encryption in trusted application

Memory corruption while processing IOCTL command with larger buffer in Bluetooth Host

Memory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the video firmware

Memory corruption during the image encoding process

Memory corruption while processing event close when client process terminates abruptly

Memory corruption while processing multiple simultaneous escape calls

Memory corruption while processing video packets received from video firmware

Memory corruption while processing a private escape command in an event trigger