Qualcomm QCA6310 Firmware

Use After Free in HLOS

Double free in Linux-Android

Integer overflow to buffer overflow in Audio

Integer overflow to buffer overflow in Modem

Use after free in Modem

Improper Restrictions of Operations within the Bounds of a Memory Buffer in Linux

Buffer Copy Without Checking Size of Input in SPS Applications

Buffer Over-read in Trusted Execution Environment

Integer Overflow to Buffer Overflow in User Identity Module

Buffer Copy Without Checking Size of Input in Automotive Audio

Use After Free in Audio

Use of Out-of-range Pointer Offset in PCIe

Buffer Copy Without Checking Size of Input in Audio

Buffer Copy Without Checking Size of Input in WLAN Host

Integer Overflow or Wraparound in HLOS

Use of Out-of-range Pointer Offset in Audio

Configuration Issue in Core

Buffer Copy Without Checking Size of Input in Audio

Buffer Copy Without Checking Size of Input in Audio

Buffer Copy Without Checking Size of Input in HLOS

Use After Free in HLOS

Detection of Error Condition Without Action in Hypervisor

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Qualcomm IPC

Buffer Copy Without Checking Size of Input in Graphics Linux

Buffer Copy Without Checking Size of Input in Trusted Execution Environment

Permissions, Privileges, and Access Control issues in TZ Secure OS

Buffer Over-read in Trusted Execution Environment

Use After Free in GPS HLOS Driver

Improper access control in Kernel

Improper Access Control in Hypervisor

Cryptographic Issues in Automotive

Incorrect Calculation of Buffer Size in HLOS

Improper Validation of Array Index in Automotive Autonomy

Improper Access Control in Core

Improper Access Control Applied to Mirrored or Aliased Memory Regions in Hypervisor

APK can load a crafted model into the CDSP which can lead to a compromise of CDSP and other APK`s data executing there in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Out of bound memory read in Data modem while unpacking data due to lack of offset length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Buffer over-read can happen when the buffer length received from response handlers is more than the size of the payload in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

Denial of service in WLAN due to out-of-bound read happens while processing VHT action frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Improper authentication of EAP WAPI EAPOL frames from unauthenticated user can lead to information disclosure in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking