Buffer Over-read in WLAN Firmware

Insufficient Granularity of Access Control in Core

Use After Free in WLAN Host

Buffer Over-read in WLAN Firmware

Buffer Over-read in WLAN Host

Buffer Over-read in WLAN Firmware

Buffer Over-read in Multi Mode Call Processor

Loop with Unreachable Exit Condition (`Infinite Loop`) in Multi Mode Call Processor

Buffer Over-read in WLAN Host Communication

Buffer Over-read in WLAN HOST

Improper Authentication in Multi-Mode Call Processor

Reachable Assertion in Data Modem

Incorrect Type Conversion or Cast in Multi-Mode Call Processor

Improper Input Validation in Multi-Mode Call Processor

Improper input Validation in Multi-Mode Call Processor

Reachable Assertion in Multi-Mode Call Processor

Reachable Assertion in Multi-Mode Call Processor

Improper Release of Memory Before Removing Last Reference in Data Modem

Transient DOS in WLAN Firmware when the length of received beacon is less than length of ieee802.11 beacon frame

Transient DOS in Multi-Mode Call Processor while processing UE policy container

Transient DOS in Multi-Mode Call Processor due to UE failure because of heap leakage

Transient DOS in Data Modem during DTLS handshake

Transient DOS while converting TWT (Target Wake Time) frame parameters in the OTA broadcast

Transient DOS in Data modem while handling TLB control messages from the Network

Transient DOS in Modem after RRC Setup message is received

Transient DOS in Bluetooth Host while rfc slot allocation

Transient DOS in WLAN Firmware while parsing a NAN management frame

Cryptographic issue in Data Modem due to improper authentication during TLS handshake

Information Disclosure in data Modem while parsing an FMTP line in an SDP message

Information Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line value

Transient DOS in Modem while allocating DSM items

Transient DOS in Modem while triggering a camping on an 5G cell

Transient DOS in WLAN Firmware while interpreting MBSSID IE of a received beacon frame

Information Disclosure in WLAN HOST while sending DPP action frame to peer with an invalid source address

Transient DOS in WLAN Firmware while processing frames with missing header fields

Transient DOS due to improper authentication in modem while receiving plain TLB OTA request message from network

Transient DOS due to improper authorization in Modem

Transient DOS due to reachable assertion in Modem because of invalid network configuration

Assertion occurs while processing Reconfiguration message due to improper validation

Transient DOS due to reachable assertion in Modem when UE received Downlink Data Indication message from the network

Transient DOS due to reachable assertion in Modem while processing config related to cross carrier scheduling, which is not supported

Transient DOS due to buffer over-read in WLAN while sending a packet to device

Transient DOS due to reachable assertion in Modem while processing SIB1 Message

Transient DOS due to reachable assertion in modem when network repeatedly sent invalid message container for NR to LTE handover

Information disclosure due to buffer over-read in WLAN while parsing NMF frame

Denial of service in modem due to reachable assertion while processing reconfiguration message in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon…

Denial of service in Modem module due to improper authorization while error handling in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…

Transient DOS due to buffer over-read in WLAN firmware while processing PPE threshold

Denial of service in WLAN due to potential null pointer dereference while accessing the memory location in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…

Information disclosure due to untrusted pointer dereference in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon…