Qualcomm QCA6420 Firmware - any version

Buffer Copy without Checking Size of Input in Audio

Use After Free in Audio

Use After Free in Camera

While waiting for a response to a callback or listener request, non-secure clients can change permissions to shared memory buffers used by HLOS Invoke Call to secure kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

Stack-based Buffer Overflow in WLAN Windows Host

Improper Input Validation in Secure Processor

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in FM Host

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in FM Host

Memory corruption due to double free issue in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

Memory corruption in diag due to use after free while processing dci packet in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Memory corruption in camera due to improper validation of array index in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Memory corruption in camera due to buffer copy without checking size of input in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Wearables

Integer Overflow to Buffer Overflow in Modem

Integer overflow to buffer overflow in User Identity Module

Improper Authorization in HLOS

Improper Validation of Array Index in Audio

Memory corruption in audio due to lack of check of invalid routing address into APR Routing table in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Configuration weakness in modem

Buffer copy without checking the size of input in HLOS

Multiple Type Confusion Vulnerability

Use after free in WLAN

Use of out-of-range pointer offset in Audio

Stack based buffer overflow in Core

Incorrect Type Conversion or Cast in Trusted Execution Environment

Improper Restriction of Operations within the Bounds of a Memory Buffer in MPP Performance

Improper Restriction of Operations within the Bounds of a Memory Buffer in UTILS

Improper validation of array index in User Identity Module

Double Free in Data Network Stack & Connectivity

Use After Free in NPU

Integer Overflow or Wraparound in Radio Interface Layer

Improper Validation of Array Index in WLAN HAL

Improper Restriction of Operations within the Bounds of a Memory Buffer in WLAN HAL

Buffer Copy Without Checking Size of Input in WLAN HAL

Buffer Copy Without Checking Size of Input in WLAN HAL

Improper Validation of Array Index in WLAN HAL

Buffer Copy without Checking the Size of Input(Classic Buffer Overflow) in Core Platform

Buffer Copy without Checking the Size of Input in WLAN Firmware

Buffer Copy without Checking the Size of Input(Classic Buffer Overflow) in Core Platform

Use of Out-of-range Pointer Offset in Qualcomm IPC

Improper Validation of Array Index in WLAN HAL