Qualcomm QCA6320

Improper validation of array index in User Identity Module

Improper Restriction of Operations within the Bounds of a Memory Buffer in MPP Performance

Improper Restriction of Operations within the Bounds of a Memory Buffer in UTILS

Buffer Over-read in WLAN HOST

Use of Out-of-range Pointer Offset in WLAN HAL

Buffer Copy Without Checking Size of Input in WLAN HAL

Improper Validation of Array Index in WLAN HAL

Improper Validation of Array Index in WLAN HAL

Improper Validation of Array Index in WLAN HAL

Improper Validation of Array Index in WLAN HAL

Improper Input Validation in WLAN HOST

Improper Input Validation in Audio

Buffer Copy Without Checking Size of Input in WLAN HOST

Stack-based Buffer Overflow in WLAN HOST

Buffer Over-read in WLAN Host

Buffer Copy without Checking the Size of Input in WLAN Firmware

Buffer Copy Without Checking Size of Input in WLAN HAL

Improper Restriction of Operations within the Bounds of a Memory Buffer in WLAN HAL

Double free in Linux-Android

Integer overflow to buffer overflow in Audio

Integer overflow to buffer overflow in Modem

Use after free in Modem

Improper Restrictions of Operations within the Bounds of a Memory Buffer in Linux

Buffer Copy Without Checking Size of Input in Audio

Integer Overflow to Buffer Overflow in User Identity Module

Buffer Copy Without Checking Size of Input in WLAN Host

Buffer Copy Without Checking Size of Input in SPS Applications

Use After Free in Audio

Buffer Copy Without Checking Size of Input in Audio

Use of Out-of-range Pointer Offset in Audio

Buffer Copy Without Checking Size of Input in Audio

Buffer Copy Without Checking Size of Input in HLOS

Use After Free in HLOS

Buffer Copy Without Checking Size of Input in Graphics Linux

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Qualcomm IPC

Incorrect Calculation of Buffer Size in HLOS

APK can load a crafted model into the CDSP which can lead to a compromise of CDSP and other APK`s data executing there in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Out of bound memory read in Data modem while unpacking data due to lack of offset length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Divide by zero issue can happen while updating delta extension header due to improper validation of master SN and extension header SN in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Out of bound memory access while processing frames due to lack of check of invalid frames received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking