Qualcomm

Denial of service in SAP case due to improper handling of connections when association is rejected in Snapdragon Auto, S

Possible buffer over read due to improper validation of data pointer while parsing FILS indication IE in Snapdragon Auto

Improper handling of received malformed FTMR request frame can lead to reachable assertion while responding with FTM1 fr

Possible out of bound read due to lack of length check of Bandwidth-NSS IE in Snapdragon Auto, Snapdragon Compute, Snapd

Possible buffer out of bound read can occur due to improper validation of TBTT count and length while parsing the beacon

Use after free can occur due to improper handling of response from firmware in Snapdragon Auto, Snapdragon Compute, Snap

Possible assertion due to improper verification while creating and deleting the peer in Snapdragon Auto, Snapdragon Comp

Possible buffer overflow due to improper validation of buffer length while processing fast boot commands in Snapdragon A

Possible buffer overflow due to lack of length check in BA request in Snapdragon Auto, Snapdragon Compute, Snapdragon Co

Possible buffer over-read due to lack of length check while flashing meta images in Snapdragon Consumer IOT, Snapdragon

Possible buffer over read due to lack of length check while flashing meta images in Snapdragon Consumer IOT, Snapdragon

Possible buffer over-read due to incorrect overflow check when loading splash image in Snapdragon Consumer IOT, Snapdrag

Possible Buffer Over-read due to lack of validation of boundary checks when loading splash image in Snapdragon Consumer

Weak configuration in WLAN could cause forwarding of unencrypted packets from one client to another in Snapdragon Comput

Improper length check of public exponent in RSA import key function could cause memory corruption. in Snapdragon Auto, S

Possible buffer overflow due to lack of length check in Trusted Application in Snapdragon Auto, Snapdragon Compute, Snap

Memory corruption in key parsing and import function due to double freeing the same heap allocation in Snapdragon Auto,

An assertion can be reached in the WLAN subsystem while using the Wi-Fi Fine Timing Measurement protocol in Snapdragon W

Incorrect handling of pointers in trusted application key import mechanism could cause memory corruption in Snapdragon A

Buffer overflow in modem due to improper array index check before copying into it in Snapdragon Auto, Snapdragon Compute

Reachable assertion is possible while processing peer association WLAN message from host and nonstandard incoming packet

Possible use after free in Display due to race condition while creating an external display in Snapdragon Auto, Snapdrag

Possible integer overflow in RPMB counter due to lack of length check on user provided data in Snapdragon Auto, Snapdrag

Possible out of bound read in DRM due to improper buffer length check. in Snapdragon Auto, Snapdragon Compute, Snapdrago

While waiting for a response to a callback or listener request, non-secure clients can change permissions to shared memo

Possible buffer overflow in voice service due to lack of input validation of parameters in QMI Voice API in Snapdragon A

Possible buffer overflow while updating ikev2 parameters for delete payloads received during informational exchange due

Stack out-of-bounds write occurs while setting up a cipher device if the provided IV length exceeds the max limit value

While processing server certificate from IPSec server, certificate validation for subject alternative name API can cause

Image address is dereferenced before validating its range which can cause potential QSEE information leakage in Snapdrag

Information disclosure issue due to lack of validation of pointer arguments passed to TZ BSP in Snapdragon Wired Infrast

A race between command submission and destroying the context can cause an invalid context being added to the list leads

Memory corruption due to improper check to return error when user application requests memory allocation of a huge size

An improper free of uninitialized memory can occur in DIAG services in Snapdragon Compute, Snapdragon Industrial IOT, Sn

Memory corruption due to lack of validation of pointer arguments passed to Trustzone BSP in Snapdragon Wired Infrastruct

Memory corruption due to lack of validation of pointer arguments passed to Trustzone BSP in Snapdragon Wired Infrastruct

Memory corruption due to lack of validation of pointer arguments passed to TrustZone BSP in Snapdragon Wired Infrastruct

Memory corruption due to lack of check of validation of pointer to buffer passed to trustzone in Snapdragon Wired Infras

Use after free due to race condition when reopening the device driver repeatedly in Snapdragon Auto, Snapdragon Compute,

Out of bound read will happen if EAPOL Key length is less than expected while processing NAN shared key descriptor attri

Memory corruption due to ioctl command size was incorrectly set to the size of a pointer and not enough storage is alloc

Use after free issue when importing a DMA buffer by using the CPU address of the buffer due to attachment is not cleaned

Possible Buffer over-read in ARP/NS parsing due to lack of check of packet length received in Snapdragon Auto, Snapdrago

Buffer overflow might occur while parsing unified command due to lack of check of input data received in Snapdragon Auto

Time-of-check time-of-use race condition While processing partition entries due to newly created buffer was read again f

Possible heap overflow while parsing NAL header due to lack of check of length of data received from user in Snapdragon

Trusted APPS to overwrite the CPZ memory of another use-case as TZ only checks the physical address not overlapping with

Memory corruption due to buffer overflow while copying the message provided by HLOS into buffer without validating the l

Out-of-bounds memory access can occur while calculating alignment requirements for a negative width from external compon

Resource leakage issue during dci client registration due to reference count is not decremented if dci client registrati