Buffer Over-read in WLAN Firmware

Reachable Assertion in BT Controller

Information disclosure due to buffer over-read in WLAN while parsing BTM action frame

Information disclosure due to buffer over-read in WLAN while WLAN frame parsing due to missing frame length check

Information disclosure in WLAN HAL while handling command through WMI interfaces

Information disclosure in WLAN HAL while handling the WMI state info command

Information Disclosure in Qualcomm IPC while reading values from shared memory in VM

Information Disclosure in WLAN Host when processing WMI event command

Information disclosure in WLAN HOST while processing the WLAN scan descriptor list during roaming scan

Transient DOS due to buffer over-read in WLAN while parsing corrupted NAN frames

Information disclosure due to buffer over-read in WLAN while handling IBSS beacons frame

Possible buffer over read due to lack of size validation while copying data from DBR buffer to RX buffer and can lead to Denial of Service in Snapdragon Auto, Snapdragon Compute,…