Use After Free in DSP Service

Use After Free in Graphics

Stack-based Buffer Overflow in WLAN Host

Buffer Copy Without Checking Size of Input in Secure Processor

Improper Validation of Array Index in Secure Processor

Memory corruption in WLAN HOST while processing the WLAN scan descriptor list

Buffer copy in GATT multi notification due to improper length check for the data coming over-the-air in Snapdragon Connectivity, Snapdragon Industrial IOT

Possible buffer overflow to improper validation of hash segment of file while allocating memory in Snapdragon Connectivity, Snapdragon Mobile

Cryptographic issue may occur while encrypting license data

Use After Free in SCE-Mink

Memory corruption when the mapped pages in VBO are still mapped after reclaiming by shrinker

Due to insufficient validation of ELF headers, an Incorrect Calculation of Buffer Size can occur in Boot leading to memory corruption in Snapdragon Connectivity, Snapdragon…

Information disclosure may occur during a video call if a device resets due to a non-conforming RTCP packet that doesn`t adhere to RFC standards

Information disclosure while parsing the BSS parameter change count or MLD capabilities fields of the ML IE

An integer overflow due to improper check performed after the address and size passed are aligned in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…

Use After Free in DSP_Services

Use After Free in DSP Service

Untrusted Pointer Dereference in Camera

Untrusted Pointer Dereference in Windows Compute

Buffer Over-read in Windows Compute

Use After Free in Computer Vision

Use After Free in Computer Vision

Out-of-bounds Write in DSP Service

Out-of-bounds Write in HLOS

Exposed dangerous function in windows host

Use After Free in DSP Service

Buffer Over-read in Camera

Buffer Over-read in Camera

Buffer Over-read in Camera

Buffer Over-read in Camera

Buffer Over-read in Camera

Buffer Over-read in WinBlast Driver

Stack-based Buffer Overflow in Camera Driver

Buffer Over-read in Camera

Out-of-bounds Write in Computer Vision

Use After Free in Automotive Audio

Out-of-bounds Write in Automotive

Memory Corruption when initiating GPU memory mapping using scatter-gather lists due to unchecked IOMMU mapping errors

Memory Corruption when multiple threads simultaneously access a memory free API

Memory Corruption when user space address is modified and passed to mem_free API, causing kernel memory to be freed inadvertently

Memory corruption occurs when a secure application is launched on a device with insufficient memory

Memory corruption when copying overlapping buffers during memory operations due to incorrect offset calculations

Memory corruption while passing pages to DSP with an unaligned starting address

Memory corruption while deinitializing a HDCP session

Memory Corruption when processing IOCTLs for JPEG data without verification

Memory corruption while routing GPR packets between user and root when handling large data packet

Memory corruption during video playback when video session open fails with time out error

Memory corruption while accessing a buffer during IOCTL processing

Memory corruption while invoking remote procedure IOCTL calls

Memory corruption while allocating buffers in DSP service