Integer Overflow or Wraparound in Graphics Linux

Memory corruption while loading an ELF segment in TEE Kernel

Improper handling of permissions of a shared memory region can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…

Improper validation of memory region in Hypervisor can lead to incorrect region mapping in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…

Accepting AMSDU frames with mismatched destination and source address can lead to information disclosure in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer…

Possible integer overflow due to improper check of batch count value while sanitizer is enabled in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…

Buffer Over-read in Data Network Stack & Connectivity

Information disclosure may occur due to improper permission and access controls to Video Analytics engine

Integer Overflow or Wraparound in Audio

Memory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the video firmware

Memory corruption while handling file descriptor during listener registration/de-registration

Memory corruption while Configuring the SMR/S2CR register in Bypass mode

Use After Free in DSP Service

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in FM Host

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in FM Host

Memory corruption can occur when arbitrary user-space app gains kernel level privilege to modify DDR memory by corrupting the GPU page table

Memory corruption while processing key blob passed by the user

Memory corruption while performing finish HMAC operation when context is freed by keymaster

Memory corruption while copying a keyblob`s material when the key material`s size is not accurately checked

Memory corruption when the payload received from firmware is not as per the expected protocol size

Memory corruption when there is failed unmap operation in GPU

Memory corruption in SPS Application while requesting for public key in sorter TA

Memory corruption in Audio when memory map command is executed consecutively in ADSP

Memory corruption in Audio during playback with speaker protection

Memory corruption in TZ Secure OS while requesting a memory allocation from TA region

Memory corruption in HLOS while running playready use-case

Memory corruption in Boot while running a ListVars test in UEFI Menu during boot

Memory corruption in Audio while processing the VOC packet data from ADSP

Cryptographic issue in HLOS during key management

Memory Corruption in Core due to secure memory access by user while loading modem image

Memory Corruption in HLOS while registering for key provisioning notify

Memory corruption in Graphics while processing user packets for command submission

Memory corruption in WIN Product while invoking WinAcpi update driver in the UEFI region

Memory Corruption in Core Platform while printing the response buffer in log

Memory corruption in Core Platform while printing the response buffer in log

Memory corruption while allocating memory in COmxApeDec module in Audio

Memory Corruption in Audio while playing amrwbplus clips with modified content

Memory Corruption in GPS HLOS Driver when injectFdclData receives data with invalid data length

Memory Corruption in WLAN HOST while fetching TX status information

Memory Corruption in Audio while allocating the ion buffer during the music playback

Memory Corruption in Data Network Stack & Connectivity when sim gets detected on telephony

Memory Corruption in Linux while processing QcRilRequestImsRegisterMultiIdentityMessage request

Memory corruption due to improper access control in kernel while processing a mapping request from root process

Memory corruption due to double free in Core while mapping HLOS address to the list

Memory corruption in Linux while sending DRM request

Memory corruption in Linux android due to double free while calling unregister provider after register call

Memory Corruption in Graphics while accessing a buffer allocated through the graphics pool

Memory corruption in Graphics while importing a file

Memory corruption due to use after free in Modem while modem initialization

Memory corruption due to double free in core while initializing the encryption key