Memory corruption while redirecting log file to any file location with any file name

Untrusted Pointer Dereference in TZ Firmware

Use of Out-of-range Pointer Offset in TZ Firmware

Memory corruption while processing command in Glink linux

Memory corruption during the secure boot process, when the `bootm` command is used, it bypasses the authentication of the kernel/rootfs image

Memory corruption in TZ Secure OS while requesting a memory allocation from TA region

Memory Corruption in Core Platform while printing the response buffer in log

Memory corruption in Core Platform while printing the response buffer in log

Memory Corruption in WLAN HOST while parsing QMI WLAN Firmware response message

Memory corruption in Linux Networking due to double free while handling a hyp-assign

Cryptographic issues in BSP due to improper hash verification in Snapdragon Wired Infrastructure and Networking

Memory corruption in BT controller due to improper length check while processing vendor specific commands in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…

Possible unauthorized access to secure space due to improper check of data allowed while flashing the no access control device configuration in Snapdragon Auto, Snapdragon…

Improper cleaning of secure memory between authenticated users can lead to face authentication bypass in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…

Possible out of bound access due to improper validation of item size and DIAG memory pools data while switching between USB and PCIE interface in Snapdragon Auto, Snapdragon…

Possible out of bound write in RAM partition table due to improper validation on number of partitions provided in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…

Possible integer overflow in page alignment interface due to lack of address and size validation before alignment in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…

Possible integer overflow in access control initialization interface due to lack and size and address validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…

Buffer Over-read in WLAN HAL

Buffer Over-read in BT Controller

Reachable Assertion in WLAN Firmware

Transient DOS while processing the tone measurement response buffer when the response buffer is out of range

Transient DOS while parsing the ML IE when a beacon with common info length of the ML IE greater than the ML IE inside which this element is present

Transient DOS while parsing probe response and assoc response frame

Transient DOS while parsing noninheritance IE of Extension element when length of IE is 2 of beacon frame

Buffer Over-read in WLAN Firmware

Information disclosure while handling beacon probe frame during scan entry generation in client side

Information disclosure while parsing sub-IE length during new IE generation

Transient DOS in WLAN firmware while parsing MLO (multi-link operation)

Transient DOS in WLAN Firmware while parsing FT Information Elements

Transient DOS due to buffer over-read in WLAN while sending a packet to device

Transient DOS due to reachable assertion in WLAN while processing PEER ID populated by TQM

Transient DOS due to buffer over-read in WLAN Firmware while parsing secure FTMR frame with size lesser than 39 Bytes

Transient DOS due to uncontrolled resource consumption in WLAN firmware when peer is freed in non qos state

Transient DOS due to improper input validation in WLAN Host

Transient DOS due to improper input validation in WLAN Host while parsing frame during defragmentation

Transient DOS due to buffer over-read in WLAN Host while parsing frame information

Transient DOS due to buffer over-read in WLAN firmware while parsing cipher suite info attributes

Information disclosure in kernel due to improper handling of ICMP requests in Snapdragon Wired Infrastructure and Networking

Improper Restriction of Operations within the Bounds of a Memory Buffer in Storage

Improper access control sequence for AC database after memory allocation can lead to possible memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…

Improper Input Validation in TZ Firmware

Out-of-bounds Read in Core

Out-of-bounds Read in Core

Cryptographic issue may arise because the access control configuration permits Linux to read key registers in TCSR

Improper handling of ASB-C broadcast packets with crafted opcode in LMP can lead to uncontrolled resource consumption in Snapdragon Auto, Snapdragon Compute, Snapdragon…

Buffer Over-read in Video

Buffer Over-read in Core Services

Untrusted Pointer Dereference in TZ Firmware

Information disclosure in Linux Networking Firmware due to unauthorized information leak during side channel analysis