Memory corruption due to access of uninitialized pointer in Bluetooth HOST while processing the AVRCP packet

Use After Free in SCE-Mink

Buffer Over-read in Data Network Stack & Connectivity

Buffer Over-read in Data Network Stack & Connectivity

Buffer Over-read in Data Network Stack & Connectivity

Out-of-bounds Write in Audio

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Audio

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Camera

Out-of-bounds Write in Audio

Improper Input Validation in Camera Driver

Improper Validation of Array Index in Camera Driver

Improper Input Validation in Camera Driver

Improper Validation of Array Index in Camera Driver

Integer Overflow or Wraparound in Camera Driver

Improper Validation of Array Index in Camera Driver

Use of Out-of-range Pointer Offset in Camera Driver

Buffer Over-read in Camera Driver

Use After Free in Camera Driver

Use After Free in Camera Driver

Use After Free in HLOS

Out-of-bounds Write in Camera Driver

Time-of-check Time-of-use (TOCTOU) Race Condition in Camera

Improper Validation of Array Index in Camera

Use After Free in DSP Service

Use After Free in Camera Linux

Use After Free in Audio

Use of Out-of-range Pointer Offset in Automotive Audio

Use After Free in Automotive Multimedia

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Camera_Linux

Improper Validation of Array Index in Camera

Use of Out-of-range Pointer Offset in Display

Use After Free in Windows WLAN Host

Improper Restriction of Operations within the Bounds of a Memory Buffer in WLAN Windows Host

Stack-based Buffer Overflow in WLAN Windows Host

Improper Restriction of Operations within the Bounds of a Memory Buffer in WLAN Windows Host

Stack-based Buffer Overflow in Performance

Memory corruption during GNSS HAL process initialization

Memory corruption while processing GPU page table switch

Memory corruption while processing voice packet with arbitrary data received from ADSP

Memory corruption while IOCLT is called when device is in invalid state and the WMI command buffer may be freed twice

Memory corruption while station LL statistic handling

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Computer Vision

Buffer Over-read in Display

Memory corruption in Linux while sending DRM request

Memory corruption in WLAN due to use after free

Memory corruption due to use after free in trusted application environment

Memory corruption in video driver due to type confusion error during video playback

Memory corruption in display due to double free while allocating frame buffer memory

Memory corruption in display driver due to incorrect type casting while accessing the fence structure fields

Memory corruption in SPI buses due to improper input validation while reading address configuration from spi buses in Snapdragon Mobile, Snapdragon Wearables