Use After Free in DSP Service

Use After Free in Graphics

Memory corruption while processing specific files in Powerline Communication Firmware

Memory corruption in Data Modem while verifying hello-verify message during the DTLS handshake

Memory corruption in Data Modem when a non-standard SDP body, during a VOLTE call

Memory corruption in Modem while processing security related configuration before AS Security Exchange

Memory corruption in WLAN Firmware while parsing receieved GTK Keys in GTK KDE

Memory corruption in modem due to improper length check while copying into memory

Memory corruption in WLAN due to buffer copy without checking size of input while parsing keys in Snapdragon Connectivity, Snapdragon Mobile

Memory corruption in Bluetooth HOST due to stack-based buffer overflow when when extracting data using command length parameter in Snapdragon Connectivity, Snapdragon Mobile

Possible buffer overflow due to lack of parameter length check during MBSSID scan IE parse in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics…

Cryptographic issue occurs due to use of insecure connection method while downloading

Memory corruption while decoding of OTA messages from T3448 IE

Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions

Information disclosure in Modem while processing SIB5

Possible buffer out of bound read can occur due to improper validation of TBTT count and length while parsing the beacon response in Snapdragon Compute, Snapdragon Connectivity,…

Buffer Copy Without Checking Size of Input in Secure Processor

Improper Validation of Array Index in Secure Processor

Memory corruption in WLAN HOST while processing the WLAN scan descriptor list

Buffer copy in GATT multi notification due to improper length check for the data coming over-the-air in Snapdragon Connectivity, Snapdragon Industrial IOT

Possible buffer overflow to improper validation of hash segment of file while allocating memory in Snapdragon Connectivity, Snapdragon Mobile

Reusing a Nonce, Key Pair in Encryption in Automotive Platform

Use After Free in SCE-Mink

Memory corruption when the mapped pages in VBO are still mapped after reclaiming by shrinker

Due to insufficient validation of ELF headers, an Incorrect Calculation of Buffer Size can occur in Boot leading to memory corruption in Snapdragon Connectivity, Snapdragon…

Information disclosure may occur during a video call if a device resets due to a non-conforming RTCP packet that doesn`t adhere to RFC standards

Information disclosure while parsing the BSS parameter change count or MLD capabilities fields of the ML IE

An integer overflow due to improper check performed after the address and size passed are aligned in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…

Untrusted Pointer Dereference in Camera

Untrusted Pointer Dereference in Windows Compute

Buffer Over-read in Windows Compute

Use After Free in Computer Vision

Use After Free in Computer Vision

Out-of-bounds Write in DSP Service

Out-of-bounds Write in HLOS

Exposed dangerous function in windows host

Use After Free in DSP Service

Buffer Over-read in Camera

Buffer Over-read in Camera

Buffer Over-read in Camera

Buffer Over-read in Camera

Buffer Over-read in Camera

Buffer Over-read in WinBlast Driver

Stack-based Buffer Overflow in Camera Driver

Buffer Over-read in Camera

Out-of-bounds Write in Computer Vision

Out-of-bounds Write in Automotive

Improper Release of Memory Before Removing Last Reference in Graphics

Use After Free in Secure Processor

Use After Free in Secure Processor