Possible use after free due to lack of null check of DRM file status after file structure is freed in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…

Possible out of bound read due to improper length calculation of WMI message

Buffer Over-read in WLAN Firmware

Buffer Over-read in WLAN Host

Buffer Copy Without Checking Size of Input in WLAN Host

Buffer Over-read in WLAN Host Communication

Transient DOS when driver accesses the ML IE memory and offset value is incremented beyond ML IE length

Information disclosure while handling beacon probe frame during scan entry generation in client side

Information disclosure while handling beacon or probe response frame in STA

Transient DOS when WLAN firmware receives "reassoc response" frame including RIC_DATA element

Transient DOS in WLAN Host when a mobile station receives invalid channel in CSA IE while doing channel switch announcement (CSA)

Transient DOS in Audio while remapping channel buffer in media codec decoding

Denial of service in WLAN due to potential null pointer dereference while accessing the memory location in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…

Denial of service due to null pointer dereference when GATT is disconnected in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon…

Cryptographic issue in HLOS as derived keys used to encrypt/decrypt information is present on stack after use

Memory corruption in display due to time-of-check time-of-use of metadata reserved size in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…

Buffer overflow in sahara protocol while processing commands leads to overwrite of secure configuration data in Snapdragon Mobile, Snapdragon Compute, Snapdragon Auto, Snapdragon…

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in RIL

Use After Free in Computer Vision

Use After Free in Data Network Stack & Connectivity

Buffer Over-read in Core Services

Cryptographic issue in Automotive while unwrapping the key secs2d and verifying with RPMB data

Information disclosure in video due to buffer over-read while parsing avi files in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…