Exposure of Sensitive System Information to an Unauthorized Control Sphere in HLOS

Memory corruption when multiple threads try to unregister the CVP buffer at the same time

Memory corruption while parsing sensor packets in camera driver, user-space variable is used while allocating memory in kernel and parsing which can lead to huge allocation or…

Memory corruption when the user application modifies the same shared memory asynchronously when kernel is accessing it

Use After Free in HLOS

Buffer Copy Without Checking Size of Input in Audio

Out-of-bounds Write in Audio

Use After Free in HLOS

Buffer Over-read in Hypervisor

Transient DOS while processing the CU information from RNR IE

Transient DOS while parsing fragments of MBSSID IE from beacon frame

Buffer Over-read in Automotive Software platform based on QNX

Buffer Over-read in Audio

Information disclosure as NPU firmware can send invalid IPC message to NPU driver as the driver doesn`t validate the IPC message received from the firmware

Buffer Copy Without Checking Size of Input in Automotive Vehicle Networks

Buffer Over-read in Automotive Multimedia

Buffer Over-read in Audio

Buffer Over-read in Computer Vision

Buffer Over-read in Automotive OS Platform

Buffer Over-read in Automotive Autonomy

Buffer Over-read in Audio

Buffer Over-read in Automotive Autonomy

Information disclosure when the ADSP payload size received in HLOS in response to Audio Stream Manager matrix session is less than this expected size

Information disclosure while parsing dts header atom in Video

Information disclosure when VI calibration state set by ADSP is greater than MAX_FBSP_STATE in the response payload to AFE calibration command

Transient DOS while processing channel information for speaker protection v2 module in ADSP

Transient DOS in Audio when invoking callback function of ASM driver

Cryptographic issue in Automotive while unwrapping the key secs2d and verifying with RPMB data

Permanent DOS in Hypervisor while untrusted VM without PSCI support makes a PSCI call

Transient DOS in Automotive OS due to improper authentication to the secure IO calls

Information disclosure in WLAN HOST while processing the WLAN scan descriptor list during roaming scan

Information disclosure in Automotive multimedia due to buffer over-read

Transient DOS due to untrusted Pointer Dereference in core while sending USB QMI request

Information disclosure due to buffer over-read in Trusted Execution Environment while QRKS report generation

Transient Denial-of-service in Automotive due to improper input validation while parsing ELF file

Information disclosure in video due to buffer over-read while parsing avi files in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…

Information disclosure due to exposure of information while GPU reads the data in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon…

Denial of service in multimedia due to uncontrolled resource consumption while parsing an incoming HAB message in Snapdragon Auto

Time-of-check Time-of-use (TOCTOU) Race Condition in Automotive OS Platform

Permissions, Privileges, and Access Controls issue in Automotive OS Platform