Stack-based Buffer Overflow in WLAN Host

Memory corruption while performing SCM call with malformed inputs

Memory corruption while performing SCM call

Memory corruption while processing a GP command response

Memory corruption during the secure boot process, when the `bootm` command is used, it bypasses the authentication of the kernel/rootfs image

Memory corruption in TZ Secure OS while requesting a memory allocation from TA region

Memory Corruption in Core Platform while printing the response buffer in log

Memory corruption in Core Platform while printing the response buffer in log

Memory corruption in Linux Networking due to double free while handling a hyp-assign

Cryptographic issues in BSP due to improper hash verification in Snapdragon Wired Infrastructure and Networking

Memory corruption in BT controller due to improper length check while processing vendor specific commands in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…

Possible unauthorized access to secure space due to improper check of data allowed while flashing the no access control device configuration in Snapdragon Auto, Snapdragon…

Improper cleaning of secure memory between authenticated users can lead to face authentication bypass in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…

Possible out of bound write in RAM partition table due to improper validation on number of partitions provided in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…

Possible integer overflow in page alignment interface due to lack of address and size validation before alignment in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…

Possible integer overflow in access control initialization interface due to lack and size and address validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…

Transient DOS while parsing the EPTM test control message to get the test pattern

Transient DOS while processing an ANQP message

Transient DOS may occur while parsing extended IE in beacon

Transient DOS while parsing noninheritance IE of Extension element when length of IE is 2 of beacon frame

Information disclosure while handling beacon probe frame during scan entry generation in client side

Transient DOS in WLAN firmware while parsing MLO (multi-link operation)

Transient DOS in WLAN Firmware while parsing FT Information Elements

Transient DOS due to buffer over-read in WLAN while sending a packet to device

Transient DOS due to reachable assertion in WLAN while processing PEER ID populated by TQM

Transient DOS due to buffer over-read in WLAN Firmware while parsing secure FTMR frame with size lesser than 39 Bytes

Transient DOS due to uncontrolled resource consumption in WLAN firmware when peer is freed in non qos state

Transient DOS due to improper input validation in WLAN Host

Transient DOS due to improper input validation in WLAN Host while parsing frame during defragmentation

Transient DOS due to buffer over-read in WLAN Host while parsing frame information

Transient DOS due to buffer over-read in WLAN firmware while parsing cipher suite info attributes

Information disclosure in kernel due to improper handling of ICMP requests in Snapdragon Wired Infrastructure and Networking