Memory corruption in Graphics Driver when destroying a context with KGSL_GPU_AUX_COMMAND_TIMELINE objects queued

Memory corruption while running VK synchronization with KASAN enabled

Memory corruption in wearables while processing data from AON

Memory corruption while sending SMS from AP firmware

Memory corruption in WLAN Host while setting the PMK length in PMK length in internal cache

Memory Corruption in WLAN Host while deserializing the input PMK bytes without checking the input PMK length

Memory Corruption in camera while installing a fd for a particular DMA buffer

Memory corruption in Audio when SSR event is triggered after music playback is stopped

Memory corruption while processing audio effects

Memory corruption in Automotive Display while destroying the image handle created using connected display driver

Memory corruption while parsing the ADSP response command

Memory corruption in Audio during playback session with audio effects enabled

The cam_get_device_priv function does not check the type of handle being returned (device/session/link)

Memory Corruption in Core due to incorrect type conversion or cast in secure_io_read/write function in TEE

Memory Corruption in GPS HLOS Driver when injectFdclData receives data with invalid data length

Memory corruption due to untrusted pointer dereference in automotive during system call

Memory corruption in Audio while running concurrent tunnel playback or during concurrent audio tunnel recording sessions

Memory Corruption in Linux while processing QcRilRequestImsRegisterMultiIdentityMessage request

Memoru corruption in Audio when ADSP sends input during record use case

Memory corruption in Automotive GPU while querying a gsl memory node

Memory Corruption due to double free in automotive when a bad HLOS address for one of the lists to be mapped is passed

Memory corruption in Linux android due to double free while calling unregister provider after register call

Memory corruption in HAB Memory management due to broad system privileges via physical address

Memory corruption in Automotive due to Improper Restriction of Operations within the Bounds of a Memory Buffer while exporting a shared key

Memory corruption in Automotive Multimedia due to integer overflow to buffer overflow during IOCTL calls in video playback

Memory corruption due to integer overflow or wraparound in Core while DDR memory assignment

Memory corruption in Automotive Android OS due to improper validation of array index

Memory corruption due to buffer copy without checking the size of input in HLOS when input message size is larger than the buffer capacity

Memory corruption due to stack based buffer overflow in core while sending command from USB of large size

Memory corruption due to buffer copy without checking size of input while running memory sharing tests with large scattered memory

Memory corruption in Automotive Android OS due to improper input validation

Memory corruption in android core due to improper validation of array index while returning feature ids after license authentication

Memory corruption in Automotive due to integer overflow to buffer overflow while registering a new listener with shared buffer

Memory corruption in Automotive due to improper input validation

Memory corruption in kernel due to missing checks when updating the access rights of a memextent mapping

Possible memory corruption in kernel while performing memory access due to hypervisor not correctly invalidated the processor translation caches in Snapdragon Auto, Snapdragon…

Memory corruption in automotive multimedia due to use of out-of-range pointer offset while parsing command request packet with a very large type value

Memory corruption due to double free issue in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

Memory corruption due to untrusted pointer dereference in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

Memory corruption in multimedia due to improper check on the messages received

Memory corruption in multimedia due to improper check on received export descriptors in Snapdragon Auto

Memory corruption in graphics support layer due to use after free condition in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon…

Memory corruption in DSP service due to improper validation of input parameters in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT,…

A user with user level permission can access graphics protected region due to improper access control in register configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon…

Buffer Over-read in WLAN Firmware

Buffer Over-read in WLAN Host

Buffer Over-read in WLAN Host

Transient DOS while parsing probe response and assoc response frame

Transient DOS when transmission of management frame sent by host is not successful and error status is received in the host

Transient DOS while parsing noninheritance IE of Extension element when length of IE is 2 of beacon frame