Qualcomm

u'QSEE reads the access permission policy for the SMEM TOC partition from the SMEM TOC contents populated by XBL Loader

u'A buffer overflow could occur if the API is improperly used due to UIE init does not contain a buffer size a param' in

u'Buffer overflow can happen as part of SIP message packet processing while storing values in array due to lack of check

u'Potential out of bounds read while processing downlink NAS transport message due to improper length check of Informati

u'Remote code execution can happen by sending a carefully crafted POST query when Device configuration is accessed from

u'Buffer overflow occurs while processing SIP message packet due to lack of check of index validation before copying int

u'An Unaligned address or size can propagate to the database due to improper page permissions and can lead to improper a

u'Array index underflow issue in adsp driver due to improper check of channel id before used as array index.' in Snapdra

u'Two threads running simultaneously from user space can lead to race condition in fastRPC driver' in Snapdragon Auto, S

u'fscanf reads a string from a file and stores its contents on a statically allocated stack memory which leads to stack

u'Buffer over-read while processing received L2CAP packet due to lack of integer overflow check' in Snapdragon Auto, Sna

u'Third-party app may also call the broadcasts in Perfdump and cause privilege escalation issue due to improper access c

u'Possible buffer overflow in MHI driver due to lack of input parameter validation of EOT events received from MHI devic

u'Lack of handling unexpected control messages while encryption was in progress can terminate the connection and thus le

u'Buffer over-read issue in Bluetooth estack due to lack of check for invalid length of L2cap packet received from peer

u'Buffer overflow while processing PDU packet in bluetooth due to lack of check of buffer length before copying into it.

u'Buffer overflow while processing a crafted PDU data packet in bluetooth due to lack of check of buffer size before cop

u'Out of bound memory access while processing GATT data received due to lack of check of pdu data length and leads to re

u'Buffer over-read issue in Bluetooth estack due to lack of check for invalid length of L2cap configuration request rece

u'Out of bound access can happen in MHI command process due to lack of check of channel id value received from MHI devic

u'Bluetooth devices does not properly restrict the L2CAP payload length allowing users in radio range to cause a buffer

The QCMAP_CLI utility in the Qualcomm QCMAP software suite prior to versions released in October 2020 uses a system() ca

The QCMAP_Web_CLIENT binary in the Qualcomm QCMAP software suite prior to versions released in October 2020 does not val

A partial authentication bypass vulnerability exists on Atheros AR9132 3.60(AMX.8), AR9283 1.85, and AR9285 1.0.0.12NA d

u'During execution after Address Space Layout Randomization is turned on for QTEE, part of code is still mapped at known

Information can leak into userspace due to improper transfer of data from kernel to userspace in Snapdragon Auto, Snapdr

Out of bound access can happen in MHI command process due to lack of check of command channel id value received from MHI

u'Multiple Read overflows issue due to improper length check while decoding Generic NAS transport/EMM info' in Snapdrago

u'Buffer over-read Issue in Q6 testbus framework due to diag packet length is not completely validated before accessing

u'Reachable assertion when wrong data size is returned by parser for ape clips' in Snapdragon Auto, Snapdragon Consumer

u'During the error occurrence in capture request, the buffer is freed and later accessed causing the camera APP to fail

u'Possible use-after-free while accessing diag client map table since list can be reallocated due to exceeding max clien

u'Specifically timed and handcrafted traffic can cause internal errors in a WLAN device that lead to improper layer 2 Wi

u'Potential integer underflow while parsing Service Info and IPv6 link-local TLVs that comes as part of NDPE attribute'

u'Buffer Overflow issue in WLAN tcp ip verification due to usage of out of range pointer offset' in Snapdragon Auto, Sna

u'Buffer overflow while parsing PMF enabled MCBC frames due to frame length being lesser than what is expected while par

u'Buffer Overflow in mic calculation for WPA due to copying data into buffer without validating the length of buffer' in

u'Out of bounds memory access during memory copy while processing Host command' in Snapdragon Auto, Snapdragon Compute,

u'Possible out of bound write in DSP driver code due to lack of check of data received from user' in Snapdragon Auto, Sn

u'Potential buffer overflow when accessing npu debugfs node "off"/"log" with large buffer size' in Snapdragon Compute, S

u'Buffer overflow seen as the destination buffer size is lesser than the source buffer size in video application' in Sna

u'Information disclosure issue occurs as in current logic Secure Touch session is released without terminating display s

u'Information disclosure issue can occur due to partial secure display-touch session tear-down' in Snapdragon Auto, Snap

u'Resizing the usage table header before passing all the checks leads to the function exiting with a usage table in inva

u'Out of bound writes happen when accessing usage_table header entry beyond the memory allocated for the header' in Snap

u'Stack out of bound issue occurs when making query to DSP capabilities due to wrong assumption was made on determining

u'A potential buffer overflow exists due to integer overflow when parsing handler options due to wrong data type usage i

u'Channel name string which has been read from shared memory is potentially subjected to string manipulations but not va

u'Lack of check to ensure that the TX read index & RX write index that are read from shared memory are less than the FIF

u'Lack of check of integer overflow while doing a round up operation for data read from shared memory for G-link SMEM tr