Memory corruption due to buffer copy without checking the size of input in Core while sending SCM command to get write protection information

Buffer copy in GATT multi notification due to improper length check for the data coming over-the-air in Snapdragon Connectivity, Snapdragon Industrial IOT

Possible buffer overflow to improper validation of hash segment of file while allocating memory in Snapdragon Connectivity, Snapdragon Mobile

Integer Overflow or Wraparound in Display

Memory corruption when the mapped pages in VBO are still mapped after reclaiming by shrinker

Due to insufficient validation of ELF headers, an Incorrect Calculation of Buffer Size can occur in Boot leading to memory corruption in Snapdragon Connectivity, Snapdragon…

Buffer Over-read in Data Network Stack & Connectivity

Buffer Over-read in Data Network Stack & Connectivity

Information disclosure due to buffer over-read in Bluetooth HOST while pairing and connecting A2DP

Improper integrity check can lead to race condition between tasks PDCP and RRC? right after a valid RRC Command packet has been received in Snapdragon Auto, Snapdragon Compute,…

Exposed Dangerous Method or Function in HLOS

Out-of-bounds Write in Display

Improper Access Control in Core

Use After Free in GPS HLOS Driver

Improper Input Validation in Automotive

Out-of-bounds Write in SPS Applications

Use of Out-of-range Pointer Offset in Trust Management Engine

NULL Pointer Dereference in Display

Improper Validation of Array Index in Camera

Improper Validation of Array Index in Camera

Use After Free in Computer Vision

Memory corruption when invalid length is provided from HLOS for FRS/UDS request/response buffers

Untrusted Pointer Dereference in Computer Vision

Memory corruption can occur if VBOs hold outdated or invalid GPU SMMU mappings, especially when the binding and reclaiming of memory buffers are performed at the same time

Memory corruption while processing graphics kernel driver request to create DMA fence

Memory corruption when keymaster operation imports a shared key

Memory corruption while handling user packets during VBO bind operation

Memory corruption while invoking IOCTL call for GPU memory allocation and size param is greater than expected size

Memory corruption when the IOCTL call is interrupted by a signal

Memory corruption as GPU registers beyond the last protected range can be accessed through LPAC submissions

Memory corruption in WIN Product while invoking WinAcpi update driver in the UEFI region

Memory Corruption while accessing metadata in Display

Memory corruption in Audio while validating and mapping metadata

Memory corruption in Trusted Execution Environment while calling service API with invalid address

Memory corruption in Audio while running concurrent tunnel playback or during concurrent audio tunnel recording sessions

Memory Corruption due to double free in automotive when a bad HLOS address for one of the lists to be mapped is passed

Memory corruption due to use after free in Core when multiple DCI clients register and deregister

Memory corruption in Automotive due to Improper Restriction of Operations within the Bounds of a Memory Buffer while exporting a shared key

Memory corruption due to integer overflow or wraparound in Core while DDR memory assignment

Memory corruption due to buffer copy without checking the size of input while loading firmware in Linux Kernel

Memory corruption due to buffer copy without checking the size of input in HLOS when input message size is larger than the buffer capacity

Memory corruption due to stack based buffer overflow in core while sending command from USB of large size

Memory corruption in modem due to use of out of range pointer offset while processing qmi msg

Memory corruption due to buffer copy without checking size of input while running memory sharing tests with large scattered memory

Memory corruption in Automotive Android OS due to improper input validation

Memory corruption in kernel due to missing checks when updating the access rights of a memextent mapping

Memory corruption in camera due to improper validation of array index in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon…

Memory corruption in SPI buses due to improper input validation while reading address configuration from spi buses in Snapdragon Mobile, Snapdragon Wearables

Memory corruption in i2c buses due to improper input validation while reading address configuration from i2c driver in Snapdragon Mobile, Snapdragon Wearables

Possible memory corruption in kernel while performing memory access due to hypervisor not correctly invalidated the processor translation caches in Snapdragon Auto, Snapdragon…