Qualcomm

Memory corruption in multimedia due to improper check on the messages received. in Snapdragon Auto

Memory corruption in multimedia due to incorrect type conversion while adding data in Snapdragon Auto

Denial of service in multimedia due to uncontrolled resource consumption while parsing an incoming HAB message in Snapdr

Memory corruption in multimedia due to improper check on received export descriptors in Snapdragon Auto

Memory corruption in multimedia due to improper validation of array index in Snapdragon Auto

Memory corruption in multimedia driver due to untrusted pointer dereference while reading data from socket in Snapdragon

Memory corruption in graphic driver due to use after free while calling multiple threads application to driver. in Snapd

Memory corruption in Bluetooth HOST due to stack-based buffer overflow when when extracting data using command length pa

Improper validation of backend id in PCM routing process can lead to memory corruption in Snapdragon Auto, Snapdragon Co

Memory corruption in audio due to lack of check of invalid routing address into APR Routing table in Snapdragon Auto, Sn

Devices with keyprotect off may store unencrypted keybox in RPMB and cause cryptographic issue in Snapdragon Auto, Snapd

Potential memory leak in modem during the processing of NSA RRC Reconfiguration with invalid Radio Bearer Config in Snap

An out-of-bounds read can occur while parsing a server certificate due to improper length check in Snapdragon Auto, Snap

Out of bounds writing is possible while verifying device IDs due to improper length check before copying the data in Sna

Memory corruption due to out of bound read while parsing a video file in Snapdragon Auto, Snapdragon Compute, Snapdragon

A null pointer dereference may potentially occur during RSA key import in Snapdragon Auto, Snapdragon Compute, Snapdrago

Due to insufficient validation of ELF headers, an Incorrect Calculation of Buffer Size can occur in Boot leading to memo

Use after free in the synx driver issue while performing other functions during multiple invocation of synx release call

Out of bound write in DSP service due to improper bound check for response buffer size in Snapdragon Auto, Snapdragon Co

Non-secure region can try modifying RG permissions of IO space xPUs due to improper input validation in Snapdragon Auto,

Possible authentication bypass due to improper order of signature verification and hashing in the signature verification

Possible address manipulation from APP-NS while APP-S is configuring an RG where it tries to merge the address ranges in

Improper checking of AP-S lock bit while verifying the secure resource group permissions can lead to non secure read and

Possible authentication bypass due to improper order of signature verification and hashing in the signature verification

Memory corruption in bluetooth host due to integer overflow while processing BT HFP-UNIT profile in Snapdragon Auto, Sna

Memory corruption in multimedia driver due to double free while processing data from user in Snapdragon Auto

Memory corruption in audio due to use after free while managing buffers from internal cache in Snapdragon Compute, Snapd

memory corruption in video due to buffer overflow while parsing mkv clip with no codechecker in Snapdragon Auto, Snapdra

Memory corruption in video due to double free while parsing 3gp clip with invalid meta data atoms in Snapdragon Auto, Sn

Memory corruption in video due to buffer overflow while reading the dts file in Snapdragon Auto, Snapdragon Compute, Sna

Memory corruption when extracting qcp audio file due to lack of check on data length in Snapdragon Auto, Snapdragon Comp

Denial of service due to memory corruption while extracting ape header from clips in Snapdragon Auto, Snapdragon Compute

Memory corruption due to possible buffer overflow while parsing DSF header with corrupted channel count in Snapdragon Au

Buffer overflow can occur due to improper validation of NDP application information length in Snapdragon Auto, Snapdrago

Possible use after free when process shell memory is freed using IOCTL munmap call and process initialization is in prog

kernel event may contain unexpected content which is not generated by NPU software in asynchronous execution mode in Sna

Out of bound read in WLAN HOST due to improper length check can lead to DOS in Snapdragon Auto, Snapdragon Compute, Snap

Possible buffer over read due to lack of size validation while unpacking frame in Snapdragon Auto, Snapdragon Compute, S

Use after free in graphics fence due to a race condition while closing fence file descriptor and destroy graphics timeli

Memory corruption in graphics support layer due to use after free condition in Snapdragon Auto, Snapdragon Consumer IOT,

Memory corruption in BT controller due to improper length check while processing vendor specific commands in Snapdragon

Memory corruption in DSP service due to improper validation of input parameters in Snapdragon Auto, Snapdragon Compute,

Buffer copy in GATT multi notification due to improper length check for the data coming over-the-air in Snapdragon Conne

An array index is improperly used to lock and unlock a mutex which can lead to a Use After Free condition In the Synx dr

Improper handling between export and release functions on the same handle from client can lead to use after free in Snap

Potential out of Bounds read in FIPS event processing due to improper validation of the length from the firmware in Snap

An out-of-bounds write can occur due to an incorrect input check in the camera driver in Snapdragon Auto, Snapdragon Com

APK can load a crafted model into the CDSP which can lead to a compromise of CDSP and other APK`s data executing there i

Improper buffer initialization on the backend driver can lead to buffer overflow in Snapdragon Auto

A user with user level permission can access graphics protected region due to improper access control in register config