Improper Restriction of Operations within the Bounds of a Memory Buffer in Storage

Out-of-bounds Write in Camera Driver

Use After Free in Camera Driver

Memory corruption while processing multiple IOCTL calls from HLOS to DSP

Improper access control sequence for AC database after memory allocation can lead to possible memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…

Integer Underflow (Wrap or Wraparound) in WLAN Host

Reachable Assertion in Modem

Improper Input Validation in TZ Firmware

Out-of-bounds Read in Core

Out-of-bounds Read in Core

Cryptographic issue may arise because the access control configuration permits Linux to read key registers in TCSR

Information disclosure due to buffer over-read in Bluetooth HOST while processing GetFolderItems and GetItemAttribute Cmds from peer device

Improper handling of ASB-C broadcast packets with crafted opcode in LMP can lead to uncontrolled resource consumption in Snapdragon Auto, Snapdragon Compute, Snapdragon…

Buffer Over-read in Video

Buffer Over-read in Core Services

Information disclosure while deriving keys for a session for any Widevine use case

Transient DOS while importing a PKCS#8-encoded RSA key with zero bytes modulus

Transient DOS due to untrusted Pointer Dereference in core while sending USB QMI request

Information disclosure in Kernel due to indirect branch misprediction

Information disclosure due to buffer overread in Core