Integer Overflow or Wraparound in Graphics Linux

Use After Free in DSP Services

Qualcomm Multiple Chipsets Improper Input Validation Vulnerability

Qualcomm Multiple Chipsets Use-After-Free Vulnerability

Memory corruption in modem due to buffer overflow while processing a PPP packet

Memory corruption due to access of uninitialized pointer in Bluetooth HOST while processing the AVRCP packet

User can overwrite Security Code NV item without knowing current SPC due to improper validation of SPC code setting and device lock in Snapdragon Auto, Snapdragon Compute,…

Lack of check of input size can make device memory get corrupted because of buffer overflow in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206,…

While parsing an mp4 file, a buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear

While parsing an mp4 file, an integer overflow leading to a buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear

While parsing an mp4 file, a stack-based buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear

Accepting AMSDU frames with mismatched destination and source address can lead to information disclosure in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer…

Possible integer overflow due to improper check of batch count value while sanitizer is enabled in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…

Improper Access Control in Multimedia in Snapdragon Mobile and Snapdragon Wear, Non-standard applications without permission may acquire permission of Qualcomm-specific…

Race condition between the camera functions due to lack of resource lock which will lead to memory corruption and UAF issue in Snapdragon Auto, Snapdragon Consumer Electronics…

Possible use after free issue due to race condition while attempting to mark the entry pages as dirty using function set_page_dirty() in Snapdragon Auto, Snapdragon Compute,…

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear IPQ4019, MDM9206, MDM9607, MDM9625,…

Incorrect Calculation of Buffer Size in SCE-Mink

Incorrect Calculation of Buffer Size in HLOS

Improper Access Control in Automotive Multimedia

Use After Free in HLOS

Use After Free in HLOS

Buffer Over-read in MProc

Buffer Over-read in IPA

Improper Authentication in TrustZone

Permissions, Privileges, and Access Controls in Data

Buffer Copy Without Checking Size of Input in Graphics Linux

Integer Overflow to Buffer Overflow in Audio

Use After Free in DSP Service

Use After Free in Graphics

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Qualcomm IPC

Double Free in HLOS

Memory corruption when IOMMU unmap of a GPU buffer fails in Linux

Memory corruption when there is failed unmap operation in GPU

Memory corruption while processing finish_sign command to pass a rsp buffer

Memory corruption in SPS Application while requesting for public key in sorter TA

Memory corruption in Audio while processing RT proxy port register driver

Memory corruption in Audio while processing the calibration data returned from ACDB loader

Memory corruption in Audio while processing IIR config data from AFE calibration block

Memory corruption in Audio while calling START command on host voice PCM multiple times for the same RX or TX tap points

Memory corruption in Audio when memory map command is executed consecutively in ADSP

Memory corruption when resource manager sends the host kernel a reply message with multiple fragments

Memory corruption in Audio during playback with speaker protection

Memory corruption in HLOS while running playready use-case

Memory corruption in Boot while running a ListVars test in UEFI Menu during boot

Memory Corruption in SPS Application while exporting public key in sorter TA

Memory corruption in Audio while processing the VOC packet data from ADSP

Memory corruption in Automotive Audio while copying data from ADSP shared buffer to the VOC packet data buffer

Memory corruption while invoking callback function of AFE from ADSP

Memory corruption in Graphics while processing user packets for command submission