Qualcomm QCA6391 Firmware -

Time-of-check Time-of-use (TOCTOU) Race Condition in Trusted Execution Environment

Out-of-bounds Write in Audio

Buffer Copy Without Checking Size of Input in Core Services

Use of Uninitialized Variable in HLOS

Improper Access Control in Automotive Multimedia

Buffer Over-read in Camera

Improper Access Control Applied to Mirrored or Aliased Memory Regions in Hypervisor

Buffer Over-read in Camera

Out-of-bounds Write in HLOS

Use After Free in Automotive GPU

NULL Pointer Dereference in SPS Applications

Time-of-check Time-of-use (TOCTOU) Race Condition in Camera

Time-of-check Time-of-use (TOCTOU) Race Condition in Camera

Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Linux

Time-of-check Time-of-use (TOCTOU) Race Condition in Camera

Buffer Over-read in Graphics

Time-of-check Time-of-use (TOCTOU) Race Condition in Camera_Linux

Buffer Copy Without Checking Size of Input in HLOS

Out-of-bounds Write in Automotive

Use After Free in Automotive Audio

Use After Free in Automotive Audio

Use After Free in Automotive Audio

Use After Free in Automotive Audio

Use After Free in Automotive Audio

Buffer Copy Without Checking Size of Input in Automotive Audio

Time-of-check Time-of-use (TOCTOU) Race Condition in Display

Buffer Over-read in Qualcomm IPC

Out-of-bounds Write in Windows Compute

Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service

APK can load a crafted model into the CDSP which can lead to a compromise of CDSP and other APK`s data executing there in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Exposure of Sensitive System Information to an Unauthorized Control Sphere in KERNEL

Key Management Errors in HLOS

Buffer Over-read in WLAN Firmware

Improper Validation of Syntactic Correctness of Input in Automotive Linux OS

Buffer Over-read in WLAN Firmware

Use After Free in Graphics

Out of bound memory read in Data modem while unpacking data due to lack of offset length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Denial of service in baseband when NW configures LTE betaOffset-RI-Index due to lack of data validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

Buffer over-read can happen when the buffer length received from response handlers is more than the size of the payload in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

Denial of service in WLAN due to out-of-bound read happens while processing VHT action frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking