Qualcomm

Possible OOB read issue in P2P action frames while handling WLAN management frame in Snapdragon Auto, Snapdragon Consume

Possible double free issue in kernel while handling the camera sensor and its sub modules power sequence in Snapdragon A

If a bitmap file is loaded from any un-authenticated source, there is a possibility that the bitmap can potentially caus

Integer overflow to buffer overflow vulnerability in PostScript image handling code used by the PostScript- and PDF-comp

Low privilege users can access service configuration which contains registry data that admins uses to create or delete e

Buffer overflow can occur in wlan module if supported rates or extended rates element length is greater than max rate se

Buffer over-read can occur in fast message handler due to improper input validation while processing a message from firm

Improper validation for loop variable received from firmware can lead to out of bound access in WLAN function while iter

Out-of-bounds access can occur in camera driver due to improper validation of array index in Snapdragon Auto, Snapdragon

Use after free issue in Xtra daemon shutdown due to static object instance getting freed from a multiple places in Snapd

Race condition due to the lack of resource lock which will be concurrently modified in the memcpy statement leads to out

Out-of-bounds memory access in Qurt kernel function when using the identifier to access Qurt kernel buffer to retrieve t

Memory corruption while accessing the memory as payload size is not validated before access in Snapdragon Auto, Snapdrag

Possible Integer overflow because of subtracting two integers without checking if the result would overflow or not in Sn

Out of boundary access due to token received from ADSP and is used without validation as an index into the array in Snap

When ADSP is compromised, the audio port index that`s returned from ADSP might be out of the valid range and leads to ou

Lack of check to ensure crypto engine data passed by user is initialized can result in bus error in Snapdragon Auto, Sna

While processing vendor command which contains corrupted channel count, an integer overflow occurs and finally will lead

Out of bound write issue is observed while giving information about properties that have been set so far for playing vid

Improper validation of read and write index of tx and rx fifo`s before calculating pointer can lead to out-of-bound acce

While deserializing any key blob during key operations, buffer overflow could occur exposing partial key information if

Improper validation of array index causes OOB write and then leads to memory corruption in MMCP in Snapdragon Auto, Snap

Kernel can do a memory read from arbitrary address passed by user during execution of a syscall in Snapdragon Auto, Snap

Thread start can cause invalid memory writes to arbitrary memory location since the argument is passed by user to kernel

Double free issue can happen when sensor power settings is freed by some thread while another thread try to access. in S

Buffer over-read may occur when downloading a corrupted firmware file that has chunk length in header which doesn`t matc

Dereference on uninitialized buffer can happen when parsing FLV clip with corrupted codec specific data in Snapdragon Au

Null-pointer dereference can occur while accessing the super index entry when it is not been allocated in Snapdragon Aut

Out of bound access due to improper validation of array index cause the index table entry to get corrupt in Snapdragon A

Incorrect reading of system image resulting in buffer overflow when size of system image is increased in Snapdragon Auto

Possible use after free issue due to race condition while attempting to mark the entry pages as dirty using function set

Use after free issue in kernel while accessing freed mdlog session info and its attributes after closing the session in

Lack of check for a negative value returned for get_clk is wrongly interpreted as valid pointer and lead to use after fr

While playing the clip which is nonstandard buffer overflow can occur while parsing in Snapdragon Auto, Snapdragon Compu

DCI client which might be preemptively freed up might be accessed for transferring packets leading to kernel error in Sn

Payload size is not checked before using it as array index in audio in Snapdragon Auto, Snapdragon Compute, Snapdragon C

Out of bound access while processing a non-standard IE measurement request with length crossing past the size of frame i

Firmware not able to send EXT scan response to host within 1 sec due to resource consumption issue in Snapdragon Auto, S

Possible stack overflow when an index equal to io buffer size is accessed in camera module in Snapdragon Compute, Snapdr

Lack of checking a variable received from driver and populating in Firmware data structure leads to buffer overflow in S

Arbitrary buffer write issue while processing sequence header during HEVC or AVC encoding. in Snapdragon Auto, Snapdrago

ADSP can be compromised since it`s a general-purpose CPU processing untrusted data in Snapdragon Auto, Snapdragon Comput

Null pointer dereference can occur while parsing invalid chunks while playing the nonstandard clip in Snapdragon Auto, S

Buffer overflow when the audio buffer size provided by user is larger than the maximum allowable audio buffer size. in S

Buffer overflow due to improper validation of buffer size while IPA driver processing to perform read operation in Snapd

Usage of hard-coded magic number for calculating heap guard bytes can allow users to corrupt heap blocks without heap al

Possible use-after-free issue due to a race condition while calling camera ioctl concurrently in Snapdragon Compute, Sna

Classic buffer overflow vulnerability while playing the specific video whose Decode picture buffer size is more than 16

Buffer overflow in WLAN NAN function due to lack of check of count value received in NAN availability attribute in Snapd

Possible buffer overflow issue due to lack of length check when parsing the extended cap IE header length in Snapdragon