Improper Validation of Syntactic Correctness of Input in Automotive Linux OS

Buffer Over-read in BT Controller

Transient DOS while processing an ANQP message

Transient DOS while processing received beacon frame

Transient DOS may occur while processing malformed length field in SSID IEs

Transient DOS while connecting STA to AP and initiating ADD TS request from AP to establish TSpec session

Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request from the AP to establish a TSpec session

Buffer Over-read in WLAN Firmware

Transient DOS while parsing ESP IE from beacon/probe response frame

Transient DOS while parse fils IE with length equal to 1

Transient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains `IPPROTO_NONE` as the next header

Transient DOS while processing a WMI P2P listen start command (0xD00A) sent from host

Transient DOS in WLAN Firmware while parsing a BTM request

Transient DOS while parsing WPA IES, when it is passed with length more than expected size

Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management frame

Transient DOS in Bluetooth Host while rfc slot allocation

Transient DOS in WLAN Firmware while parsing rsn ies

Transient DOS in Modem while allocating DSM items

Transient DOS in WLAN Host when an invalid channel (like channel out of range) is received in STA during CSA IE

Transient DOS in WLAN Host while doing channel switch announcement (CSA), when a mobile station receives invalid channel in CSA IE

Information disclosure in Network Services due to buffer over-read while the device receives DNS response

Transient DOS due to NULL pointer dereference in Modem while performing pullup for received TCP/UDP packet

Information disclosure due to buffer over-read in Bluetooth Host while A2DP streaming

Information disclosure in Modem due to buffer over-read while receiving a IP header with malformed length

Information disclosure in Modem due to buffer over-read while getting length of Unfragmented headers in an IPv6 packet

Transient DOS in WLAN Firmware due to buffer over-read while processing probe response or beacon

Information disclosure due to buffer over-read in WLAN while parsing NMF frame

Information disclosure due to buffer over-read in Modem while using static array to process IPv4 packets

Information disclosure in modem due to buffer over-red while performing checksum of packet received

Denial of service in modem due to missing null check while processing TCP or UDP packets from server

Denial of service in modem due to missing null check while processing IP packets with padding

Denial of service in modem due to null pointer dereference while processing DNS packets

Information disclosure in modem due to buffer over read in dns client due to missing length check

Information disclosure in modem due to buffer over-read while processing response from DNS server

Transient DOS due to null pointer dereference in Bluetooth HOST while receiving an attribute protocol PDU with zero length data

Transient DOS in Bluetooth HOST due to null pointer dereference when a mismatched argument is passed

Transient DOS due to loop with unreachable exit condition in WLAN while processing an incoming FTM frames

Information disclosure due to buffer over-read in WLAN firmware while parsing security context info attributes

Transient DOS due to loop with unreachable exit condition in WLAN firmware while parsing IPV6 extension header

Transient DOS due to buffer over-read in WLAN firmware while processing PPE threshold

Denial of service in modem due to infinite loop while parsing IGMPv2 packet from server in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music

Denial of service due to null pointer dereference when GATT is disconnected in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon…

Denial of service in WLAN due to out-of-bound read happens while processing VHT action frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…

Transient Denial-of-Service in WLAN due to buffer over-read while parsing MDNS frames

Information disclosure in WLAN due to improper validation of array index while parsing crafted ANQP action frames in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…

Denial of service in WLAN HOST due to buffer over read while unpacking frames in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics…

Denial of service in video due to buffer over read while parsing MP4 clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon…

Denial of service due to memory corruption while extracting ape header from clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…

Out of bound read in WLAN HOST due to improper length check can lead to DOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics…

Possible buffer over read due to lack of size validation while unpacking frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics…