Memory corruption in Data Modem while verifying hello-verify message during the DTLS handshake

Cryptographic issue occurs due to use of insecure connection method while downloading

Memory corruption while decoding of OTA messages from T3448 IE

Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions

Information disclosure in Modem while processing SIB5

Stack-based Buffer Overflow in OOBM

Buffer Copy Without Checking Size of Input in Secure Processor

Improper Validation of Array Index in Secure Processor

Memory corruption in BTHOST due to double free while music playback and calls over bluetooth headset in Snapdragon Mobile

Use After Free in SCE-Mink

Memory corruption when the mapped pages in VBO are still mapped after reclaiming by shrinker

Information disclosure may occur during a video call if a device resets due to a non-conforming RTCP packet that doesn`t adhere to RFC standards

Information disclosure while parsing the BSS parameter change count or MLD capabilities fields of the ML IE

Out-of-bounds Read in OOBM

Use After Free in DSP_Services

Use After Free in DSP Service

Integer Overflow or Wraparound in OOBM

Out-of-bounds Write in DSP Service

Untrusted Pointer Dereference in Camera

Out-of-bounds Write in Video

Out-of-bounds Write in Video

Untrusted Pointer Dereference in Windows Compute

Buffer Copy Without Checking Size of Input in Biometrics

Buffer Over-read in Windows Compute

Use After Free in Computer Vision

Use After Free in Computer Vision

Out-of-bounds Write in DSP Service

Out-of-bounds Read in DSP Service

NULL Pointer Dereference in HLOS

Out-of-bounds Write in HLOS

Exposed dangerous function in windows host

Untrusted Pointer Dereference in Power Optimization Firmware

Untrusted Pointer Dereference in Camera

Buffer Copy Without Checking Size of Input in Power Management IC

Use After Free in DSP Service

Buffer Over-read in Camera

Buffer Over-read in Camera

Buffer Over-read in Camera

Buffer Over-read in Camera

Buffer Over-read in Camera

Heap-Based Buffer Overflow in Power Management IC

Buffer Over-read in WinBlast Driver

Stack-based Buffer Overflow in Camera Driver

Buffer Over-read in Camera

Memory Corruption when processing invalid user address with nonstandard buffer address

Memory Corruption when concurrent access to shared buffer occurs during IOCTL calls

Memory Corruption when accessing buffers with invalid length during TA invocation

Memory Corruption while processing IOCTL call to update sensor property settings with invalid input parameters

Memory Corruption when initiating GPU memory mapping using scatter-gather lists due to unchecked IOMMU mapping errors

Memory Corruption when multiple threads simultaneously access a memory free API