Qualcomm MSM8996AU Firmware any version

Improper validation of buffer size input to the EFS file can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Buffer Copy without Checking Size of Input in Audio

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in FM Host

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in FM Host

Memory corruption in diag due to use after free while processing dci packet in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Integer Overflow to Buffer Overflow in Modem

Improper Input Validation in Automotive OS Platform

Configuration weakness in modem

Use of out-of-range pointer offset in Audio

Use after free in Trusted Application Environment

Use after free in WLAN

Improper validation of array index in User Identity Module

Improper Restriction of Operations within the Bounds of a Memory Buffer in MPP Performance

Improper Restriction of Operations within the Bounds of a Memory Buffer in UTILS

Improper Validation of Array Index in WLAN HAL

Buffer Over-read in WLAN HOST

Use of Out-of-range Pointer Offset in WLAN HAL

Buffer Copy Without Checking Size of Input in WLAN HAL

Improper Restriction of Operations within the Bounds of a Memory Buffer in Linux

Improper Restriction of Operations within the Bounds of a Memory Buffer in Audio

Use-After-Free Issue in Display

Integer overflow to buffer overflow in Audio

Buffer Copy Without Checking Size of Input in Audio

Buffer Copy Without Checking Size of Input in SPS Applications

Integer Overflow to Buffer Overflow in User Identity Module

Buffer Copy Without Checking Size of Input in Automotive Audio

Use After Free in Audio

Buffer Copy Without Checking Size of Input in Audio

Use of Out-of-range Pointer Offset in Audio

Buffer Copy Without Checking Size of Input in Audio

Use After Free in HLOS

Buffer Copy Without Checking Size of Input in Graphics Linux

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Qualcomm IPC

Incorrect Calculation of Buffer Size in HLOS

Out-of-bounds Write in Audio

Improper Access Control in Automotive Multimedia

Due to Improper Access Control of NAND-based EFS in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, From fastboot on a NAND-based device, the EFS partition can be erased. Apps processor then has non-secure world full read/write access to the partition until the modem boots and configures the EFS partition addresses in its MPU partition.

APK can load a crafted model into the CDSP which can lead to a compromise of CDSP and other APK`s data executing there in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Possible out of bounds read due to a missing bounds check and could lead to local information disclosure in the wifi driver with no additional execution privileges needed in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8053, APQ8096AU, IPQ4019, IPQ8064, IPQ8074, MDM9607, MSM8909W, MSM8996AU, QCA6574AU, QCA9531, QCA9558, QCA9980, SC8180X, SDM439, SDX55, SM8150, SM8250, SXR2130

Out of bound memory read in Data modem while unpacking data due to lack of offset length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables