Memory corruption while redirecting log file to any file location with any file name

Memory corruption due to stack based buffer overflow in WLAN having invalid WNM frame length

Possible buffer overflow due to lack of parameter length check during MBSSID scan IE parse in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile,…

Stack-based Buffer Overflow in WLAN Host

Incorrect Calculation of Buffer Size in SCE-Mink

Memory corruption during the secure boot process, when the `bootm` command is used, it bypasses the authentication of the kernel/rootfs image

Memory corruption in TZ Secure OS while requesting a memory allocation from TA region

Memory Corruption in WLAN HOST while parsing QMI WLAN Firmware response message

Memory corruption in Linux Networking due to double free while handling a hyp-assign

Memory corruption in core due to stack-based buffer overflow

Memory corruption in Core due to stack-based buffer overflow

Cryptographic issues in BSP due to improper hash verification in Snapdragon Wired Infrastructure and Networking

Possible unauthorized access to secure space due to improper check of data allowed while flashing the no access control device configuration in Snapdragon Auto, Snapdragon…

Improper cleaning of secure memory between authenticated users can lead to face authentication bypass in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…

Possible out of bound write in RAM partition table due to improper validation on number of partitions provided in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…

Possible integer overflow in page alignment interface due to lack of address and size validation before alignment in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…

Possible integer overflow in access control initialization interface due to lack and size and address validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…

Buffer Over-read in WLAN Firmware

Transient DOS while handling command data during power control processing

Transient DOS while processing an ANQP message

Transient DOS may occur while parsing extended IE in beacon

Information disclosure while handling beacon probe frame during scan entry generation in client side

Information disclosure while handling T2LM Action Frame in WLAN Host

Transient DOS in WLAN firmware while parsing MLO (multi-link operation)

Transient DOS while parsing WLAN beacon or probe-response frame

Transient DOS in WLAN Firmware while parsing FT Information Elements

Transient DOS due to reachable assertion in WLAN while processing PEER ID populated by TQM

Transient DOS due to buffer over-read in WLAN Firmware while parsing secure FTMR frame with size lesser than 39 Bytes

Transient DOS due to uncontrolled resource consumption in WLAN firmware when peer is freed in non qos state

Transient DOS due to improper input validation in WLAN Host

Transient DOS due to improper input validation in WLAN Host while parsing frame during defragmentation

Transient DOS due to buffer over-read in WLAN Host while parsing frame information

Transient DOS due to buffer over-read in WLAN firmware while parsing cipher suite info attributes

Information disclosure in kernel due to improper handling of ICMP requests in Snapdragon Wired Infrastructure and Networking

Improper Restriction of Operations within the Bounds of a Memory Buffer in Storage

Improper access control sequence for AC database after memory allocation can lead to possible memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…

Information disclosure may occur while processing the hypervisor log

Information disclosure while processing the hash segment in an MBN file

Information disclosure while reading data from an image using specified offset and size parameters

Buffer Over-read in Video

Untrusted Pointer Dereference in TZ Firmware

Information disclosure in Linux Networking Firmware due to unauthorized information leak during side channel analysis

Information disclosure due to buffer overread in Core

Information exposure in DSP services due to improper handling of freeing memory

Improper input validation in TrustZone memory transfer interface can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…