Qualcomm QCA6420 Firmware -

Buffer copy without checking size of input in modem

Buffer copy without checking the size of input in WLAN HAL.

Memory corruption in graphics due to buffer overflow while validating the user address in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Use after free in Neural Processing Unit

Improper Input Validation in Camera

Use of Out-of-range Pointer Offset in Audio

Use After Free in Graphics

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN HAL

Integer Overflow or Wraparound in Audio

Improper validation of array index in WLAN HAL

Integer overflow or wraparound in WLAN

Stack-based Buffer Overflow in WIN Product

Double free in Automotive

Integer Overflow or Wraparound in Audio

Integer Overflow or Wraparound in Audio

Improper Restriction of Operations within the Bounds of a Memory Buffer in Hypervisor

Buffer Copy Without Checking Size of Input in Bluetooth HOST

Use After Free in Kernel

Buffer Copy Without Checking Size of Input in SPS Applications

Buffer Copy without Checking Size of Input (`Classic Buffer Overflow`) in SPS-Applications

NULL Pointer Dereference in Windows Graphics

Integer Overflow to Buffer Overflow in Graphics Windows

Use of Out-of-range Pointer Offset in Audio

Improper access control in Qualcomm IPC

Possible use after free in Display due to race condition while creating an external display in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Improper Validation of Array Index in Hypervisor

Double Free in HLOS

Buffer Over-read in MProc

Improper Restriction of Operations withing the Bounds of a Memory Buffer in DSP Services

Improper Access Control in Graphics Linux

Memory corruption in display due to time-of-check time-of-use race condition during map or unmap in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Memory corruption in display due to time-of-check time-of-use of metadata reserved size in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Time-of-check Time-of-use (TOCTOU) Race Condition in Hypervisor

Information disclosure in Bluetooth driver due to buffer over-read while reading l2cap length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Buffer over-read in Bluetooth Host.

Information disclosure due to buffer over-read in WLAN firmware while parsing security context info attributes. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Buffer over-read in WLAN

Buffer over-read in WLAN

Buffer Over-read in WLAN HOST

Buffer Over-read in Data Modem