Memory corruption while performing SCM call with malformed inputs

Memory corruption while performing SCM call

Memory corruption due to access of uninitialized pointer in Bluetooth HOST while processing the AVRCP packet

Memory corruption in Bluetooth HOST due to buffer overflow while parsing the command response received from remote

Information disclosure while parsing the BSS parameter change count or MLD capabilities fields of the ML IE

Information disclosure due to buffer over-read in Bluetooth HOST while pairing and connecting A2DP

Memory corruption while processing config_dev IOCTL when camera kernel driver drops its reference to CPU buffers

Memory corruption while processing commands from A2dp sink command queue

Memory corruption may occur during IO configuration processing when the IO port count is invalid

Memory corruption during concurrent access to server info object due to incorrect reference count update

Memory corruption during concurrent access to server info object due to unprotected critical field

Memory corruption occurs during the copying of read data from the EEPROM because the IO configuration is exposed as shared memory

Memory corruption while processing command in Glink linux

Memory corruption can occur when arbitrary user-space app gains kernel level privilege to modify DDR memory by corrupting the GPU page table

Memory corruption when multiple listeners are being registered with the same file descriptor

Memory corruption in HLOS while converting from authorization token to HIDL vector

Memory corruption in Audio while processing the calibration data returned from ACDB loader

Memory corruption in Audio while processing IIR config data from AFE calibration block

Memory corruption in Audio while calling START command on host voice PCM multiple times for the same RX or TX tap points

Memory corruption in TZ Secure OS while requesting a memory allocation from TA region

Memory corruption in BT controller while parsing debug commands with specific sub-opcodes at HCI interface level

Memory Corruption in camera while installing a fd for a particular DMA buffer

Memory corruption in Automotive Audio while copying data from ADSP shared buffer to the VOC packet data buffer

Memory corruption while processing audio effects

Memory Corruption in Core Platform while printing the response buffer in log

Memory corruption in Core Platform while printing the response buffer in log

Memory corruption in Audio during playback session with audio effects enabled

In the function call related to CAM_REQ_MGR_RELEASE_BUF there is no check if the buffer is being used

The cam_get_device_priv function does not check the type of handle being returned (device/session/link)

Memory corruption while allocating memory in COmxApeDec module in Audio

Memory Corruption in Audio while playing amrwbplus clips with modified content

Memory corruption in WLAN while running doDriverCmd for an unspecific command

Memory Corruption in WLAN HOST while fetching TX status information

Memory Corruption in Audio while allocating the ion buffer during the music playback

Memory Corruption in GPU Subsystem due to arbitrary command execution from GPU in privileged mode

Memory corruption due to improper access control in kernel while processing a mapping request from root process

Memory corruption in Linux Networking due to double free while handling a hyp-assign

Memory Corruption in Graphics while accessing a buffer allocated through the graphics pool

Memory corruption in WLAN due to use after free

Memory corruption due to improper authentication in Qualcomm IPC while loading unsigned lib in audio PD

Memory corruption in Audio due to use of out-of-range pointer offset while Initiating a voice call session from user space with invalid session id

Memory corruption in Audio due to integer overflow to buffer overflow while music playback of clips like amr,evrc,qcelp with modified content

Memory corruption in video driver due to type confusion error during video playback

Memory corruption in display due to double free while allocating frame buffer memory

Memory corruption in display driver due to incorrect type casting while accessing the fence structure fields

Memory corruption in camera due to improper validation of array index in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon…

Cryptographic issues in BSP due to improper hash verification in Snapdragon Wired Infrastructure and Networking

Memory corruption in BT controller due to improper length check while processing vendor specific commands in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…

Possible unauthorized access to secure space due to improper check of data allowed while flashing the no access control device configuration in Snapdragon Auto, Snapdragon…

Improper cleaning of secure memory between authenticated users can lead to face authentication bypass in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…