Improper Restriction of Operations within the Bounds of a Memory Buffer in Data Network Stack & Connectivity

Memory corruption in Data Modem while verifying hello-verify message during the DTLS handshake

Memory corruption while validating the TID to Link Mapping action request frame, when a station connects to an access point

Memory corruption when AP includes TID to link mapping IE in the beacons and STA is parsing the beacon TID to link mapping IE

Memory corruption in Modem while processing security related configuration before AS Security Exchange

Memory corruption while handling payloads from remote ESL

Possible buffer overflow due to lack of parameter length check during MBSSID scan IE parse in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics…

Stack-based Buffer Overflow in WLAN Firmware

Buffer Over-read in Multi-Mode Call Processor

Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions

Information Disclosure while parsing beacon frame in STA

Information disclosure in Modem while processing SIB5

Memory corruption due to lack of validation of pointer arguments passed to Trustzone BSP in Snapdragon Wired Infrastructure and Networking

Memory corruption due to lack of validation of pointer arguments passed to Trustzone BSP in Snapdragon Wired Infrastructure and Networking

Memory corruption due to lack of validation of pointer arguments passed to TrustZone BSP in Snapdragon Wired Infrastructure and Networking

Memory corruption due to lack of check of validation of pointer to buffer passed to trustzone in Snapdragon Wired Infrastructure and Networking

Improper access control in trusted application environment can cause unauthorized access to CDSP or ADSP VM memory with either privilege in Snapdragon Auto, Snapdragon Compute,…

Possible integer overflow due to improper length check while updating grace period and count record in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…

Buffer Over-read in Data Network Stack & Connectivity

Information disclosure while parsing the BSS parameter change count or MLD capabilities fields of the ML IE

Missing Authentication for Critical Function in Data Modem

Buffer Over-read in Windows Compute

Buffer Over-read in Camera

Buffer Over-read in Camera

Buffer Over-read in Camera

Buffer Over-read in Camera

Buffer Over-read in WinBlast Driver

Buffer Copy Without Checking Size of Input in Automotive Platform

Use After Free in Automotive Audio

Use After Free in Secure Processor

Use of Uninitialized Variable in HLOS

Untrusted Pointer Dereference in Camera

Out-of-bounds Write in Audio

Use After Free in Camera

Double Free in Video

Improper Validation of Array Index in Bluetooth HOST

Use After Free in NPU

Buffer Over-read in Camera

Buffer Copy Without Checking Size of Input in Core Services

Use After Free in Camera

Double Free in Display

Use After Free in Display

Improper Validation of Array Index in Automotive Autonomy

Buffer Over-read in Display

Improper Access Control in Camera Driver

Detection of Error Condition Without Action in Hypervisor

Out-of-bounds Read in Windows WLAN Host

Out-of-bounds Read in Windows WLAN Host

Improper Validation of Array Index in Display

Buffer Over-read in Display