Information disclosure in Core services while processing a Diag command

Possible address manipulation from APP-NS while APP-S is configuring an RG where it tries to merge the address ranges in Snapdragon Connectivity, Snapdragon Mobile

Improper checking of AP-S lock bit while verifying the secure resource group permissions can lead to non secure read and write access in Snapdragon Connectivity, Snapdragon Mobile

Out-of-bounds Write in Camera Driver

Stack-based Buffer Overflow in Windows Compute

Use After Free in Camera Driver

Use After Free in Camera Driver

Buffer Copy Without Checking Size of Input in Camera Driver

Memory corruption when the user application modifies the same shared memory asynchronously when kernel is accessing it

Memory corruption while invoking IOCTL command from user-space, when a user modifies the original packet size of the command after system properties have been already sent to the…

Use after free in the synx driver issue while performing other functions during multiple invocation of synx release calls in Snapdragon Connectivity, Snapdragon Industrial IOT,…

Out of Bounds write in Linux Camera

Detection of Error Condition Without Action in Computer Vision

Memory corruption may occur while processing the OIS packet parser

Memory corruption while processing I2C settings in Camera driver

Integer Underflow (Wrap or Wraparound) in WLAN Host

Exposure of Sensitive Information Through Metadata in Powerline Communication Firmware

Use After Free in Camera Driver

Buffer Over-read in WLAN Firmware

Cryptographic issue may arise because the access control configuration permits Linux to read key registers in TCSR

Transient DOS while processing the CU information from RNR IE

Transient DOS while parsing BTM ML IE when per STA profile is not included

Transient DOS while parsing fragments of MBSSID IE from beacon frame

Transient DOS as modem reset occurs when an unexpected MAC RAR (with invalid PDU length) is seen at UE

Improper validation of tag id while RRC sending tag id to MAC can lead to TOCTOU race condition in Snapdragon Connectivity, Snapdragon Mobile

Buffer Over-read in WLAN Host Communication

Transient DOS can occur while processing UCI command

Transient DOS in Core when DDR memory check is called while DDR is not initialized

Information disclosure in Trusted Execution Environment due to buffer over-read while processing metadata verification requests

Out-of-bounds Write in Camera Driver

Out-of-bounds Write in Camera Driver