Improper validation of tag id while RRC sending tag id to MAC can lead to TOCTOU race condition in Snapdragon Connectivity, Snapdragon Mobile

Buffer Over-read in WLAN Host Communication

Buffer Over-read in DSP Service

Transient DOS while processing IOCTL call for image encoding

Information disclosure while capturing logs as eSE debug messages are logged

Transient DOS can occur while processing UCI command

Information disclosure while processing IO control commands

Information disclosure while processing information on firmware image during core initialization

Buffer Over-read in DSP Service

Information disclosure while parsing dts header atom in Video

Information Disclosure while processing IOCTL request in FastRPC

Transient DOS in Core when DDR memory check is called while DDR is not initialized

Information disclosure in Automotive multimedia due to buffer over-read

Transient DOS due to uncontrolled resource consumption in Linux kernel when malformed messages are sent from the Gunyah Resource Manager message queue

Information disclosure in Trusted Execution Environment due to buffer over-read while processing metadata verification requests

Denial of service due to reachable assertion in modem while processing filter rule from application client in Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile

Possible buffer overflow due to lack of buffer length check during management frame Rx handling lead to denial of service in Snapdragon Compute, Snapdragon Connectivity,…

Disabled SMMU from secure side while RPM is assigned a secure stream can lead to information disclosure in Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

RPM secure Stream can access any secure resource due to improper SMMU configuration in Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired…

RPM secure Stream can access any secure resource due to improper SMMU configuration in Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired…

Reading PRNG output may lead to improper key generation due to lack of buffer validation in Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon…

Possible denial of service due to improper handling of debug register trap from user applications in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

Potential null pointer dereference in KGSL GPU auxiliary command due to improper validation of user input in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Industrial IOT,…

Out-of-bounds Write in Camera Driver

Out-of-bounds Write in Camera Driver