Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Camera_Linux

Untrusted Pointer Dereference in DSP Service

Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service

Improper Input Validation in HLOS

Improper Access Control in Hypervisor

Improper Validation of Array Index in Camera Driver

Improper Validation of Array Index in Camera Driver

Integer Overflow or Wraparound in Camera Driver

Use of Out-of-range Pointer Offset in Camera Driver

Buffer Over-read in Camera Driver

Use After Free in Camera Driver

Out-of-bounds Write in Camera Driver

Use After Free in DSP Service

Use of Out-of-range Pointer Offset in Trust Management Engine

Time-of-check Time-of-use (TOCTOU) Race Condition in Camera

Improper Validation of Array Index in Camera

Use After Free in DSP Service

Use After Free in Camera Linux

Use After Free in Audio

Use of Out-of-range Pointer Offset in Automotive Audio

Use After Free in Automotive Multimedia

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Camera_Linux

Improper Validation of Array Index in Graphics_Linux

Improper Validation of Array Index in Camera

Improper Validation of Array Index in Camera Driver

Use After Free in Computer Vision

Use of Out-of-range Pointer Offset in Computer Vision

Buffer Copy Without Checking Size of Input in Data Network Stack & Connectivity

Stack-based Buffer Overflow in Performance

Use After Free in GPS

Integer Overflow to Buffer Overflow in Audio

Use After Free in Graphics Linux

Use After Free in Automotive GPU

Use After Free in Computer Vision

Use After Free in ComputerVision

Improper Restriction of Operations within the Bounds of a Memory Buffer in HLOS

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Computer Vision

Untrusted Pointer Dereference in Computer Vision

Improper Restriction of Operations within the Bounds of a Memory Buffer in HLOS

Memory corruption in Audio when SSR event is triggered after music playback is stopped

Memory Corruption in Core while invoking a call to Access Control core library with hardware protected address range

Memory corruption due to improper validation of array index in Audio

Memory corruption in Audio while running concurrent tunnel playback or during concurrent audio tunnel recording sessions

Memory corruption due to use after free in Core when multiple DCI clients register and deregister

Memory corruption in graphics due to use-after-free while graphics profiling in Snapdragon Connectivity, Snapdragon Mobile

Memory corruption in kernel due to use after free issue in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

Memory corruption in audio while playing record due to improper list handling in two threads in Snapdragon Connectivity, Snapdragon Mobile, Snapdragon Wearables

Memory corruption in audio module due to integer overflow in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Mobile, Snapdragon Wearables

Potential memory leak in modem during the processing of NSA RRC Reconfiguration with invalid Radio Bearer Config in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…

Out of bounds writing is possible while verifying device IDs due to improper length check before copying the data in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile