Memory corruption in wearables while processing data from AON

Memory corruption in Core while processing RX intent request

Memory corruption in Audio while running invalid audio recording from ADSP

Memory Corruption in Audio while invoking callback function in driver from ADSP

Memory corruption in Automotive Audio while copying data from ADSP shared buffer to the VOC packet data buffer

Cryptographic issue in HLOS during key management

Memory corruption in TZ Secure OS while loading an app ELF

Memory corruption while invoking callback function of AFE from ADSP

Memory corruption while parsing the ADSP response command

Memory corruption in DSP Service during a remote call from HLOS to DSP

Improper Access to the VM resource manager can lead to Memory Corruption

Memory corruption in Graphics while processing user packets for command submission

Memory corruption in WIN Product while invoking WinAcpi update driver in the UEFI region

Memory Corruption in Core Platform while printing the response buffer in log

Memory corruption in Core Platform while printing the response buffer in log

Memory corruption while allocating memory in COmxApeDec module in Audio

Memory Corruption in Audio while playing amrwbplus clips with modified content

Memory Corruption in Core due to incorrect type conversion or cast in secure_io_read/write function in TEE

Memory Corruption in WLAN HOST while fetching TX status information

Memory Corruption in Audio while allocating the ion buffer during the music playback

Memory Corruption in GPU Subsystem due to arbitrary command execution from GPU in privileged mode

Memoru corruption in Audio when ADSP sends input during record use case

Memory corruption due to improper access control in kernel while processing a mapping request from root process

Memory Corruption in Graphics while accessing a buffer allocated through the graphics pool

Memory corruption due to double free in core while initializing the encryption key

Memory corruption due to improper authentication in Qualcomm IPC while loading unsigned lib in audio PD

Memory corruption due to buffer copy without checking size of input while running memory sharing tests with large scattered memory

Memory corruption due to stack-based buffer overflow in Core

Memory corruption in Automotive Android OS due to improper input validation

Memory corruption in kernel due to missing checks when updating the access rights of a memextent mapping

Possible memory corruption in kernel while performing memory access due to hypervisor not correctly invalidated the processor translation caches in Snapdragon Auto, Snapdragon…

Memory corruption due to untrusted pointer dereference in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

Cryptographic issues in BSP due to improper hash verification in Snapdragon Wired Infrastructure and Networking

Memory corruption in BT controller due to improper length check while processing vendor specific commands in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…

Possible use after free due to lack of null check of DRM file status after file structure is freed in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…

Possible unauthorized access to secure space due to improper check of data allowed while flashing the no access control device configuration in Snapdragon Auto, Snapdragon…

Possible out of bounds access due to improper input validation during graphics profiling in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…

Improper validation of input when provisioning the HDCP key can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…

Buffer Over-read in WLAN Firmware

Buffer Over-read in WLAN HAL

Buffer Over-read in BT Controller

Reachable Assertion in WLAN Firmware

Buffer Over-read in WLAN HAL

Buffer Over-read in WLAN Host Communication

Transient DOS when WLAN firmware receives "reassoc response" frame including RIC_DATA element

Transient DOS in Bluetooth Host while rfc slot allocation

Information disclosure due to buffer over-read in Bluetooth Host while A2DP streaming

Stack-based Buffer Overflow in Display

Missing Cryptographic Step in Data Modem

Improper Input Validation in Trusted Execution Environment