Information disclosure in modem due to buffer over-read while processing response from DNS server

Denial of service in modem due to infinite loop while parsing IGMPv2 packet from server in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music

Improper authorization of a replayed LTE security mode command can lead to a denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…

Possible denial of service due to incorrectly decoding hex data for the SIB2 OTA message and assigning a garbage value to choice when processing the SRS configuration in…

Possible assertion due to improper handling of IPV6 packet with invalid length in destination options header in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT,…

Loop with unreachable exit condition may occur due to improper handling of unsupported input in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…

Improper Input Validation in Trusted Execution Environment

Cryptographic issue in HLOS due to improper authentication while performing key velocity checks using more than one key

Possible out of bound read in DRM due to improper buffer length check

Memory corruption in Core due to time-of-check time-of-use race condition during dump collection in trust zone

While waiting for a response to a callback or listener request, non-secure clients can change permissions to shared memory buffers used by HLOS Invoke Call to secure kernel in…

Improper Restriction of Operations within the Bounds of a Memory Buffer in Storage

Memory corruption occurs in Modem due to improper validation of array index when malformed APDU is sent from card

Improper access control sequence for AC database after memory allocation can lead to possible memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…

Information disclosure when the trusted application metadata symbol addresses are accessed while loading an ELF in TEE

Improper integrity check can lead to race condition between tasks PDCP and RRC? after a valid RRC Command packet has been received in Snapdragon Auto, Snapdragon Compute,…

There may be information disclosure during memory re-allocation in TZ Secure OS

Transient DOS while loading the TA ELF file

Information disclosure in IOE Firmware while handling WMI command

Information disclosure in Kernel due to indirect branch misprediction

Information disclosure due to buffer overread in Core

Information disclosure due to buffer overread in Core

Improper input validation in TrustZone memory transfer interface can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…

Possible null pointer dereference due to lack of validation check for passed pointer during key import in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…

While processing the authentication message in UE, improper authentication may lead to information disclosure