Qualcomm QCA6426

Integer Overflow to Buffer Overflow in RIL

Use After Free in HLOS

Incorrect Type Conversion or Cast in Video

Double free in Linux-Android

Integer overflow to buffer overflow in Audio

Improper restriction of operations within the bounds of memory buffer in Linux

Integer overflow to buffer overflow in Modem

Use after free in Modem

Buffer over-read in Modem

Improper Restrictions of Operations within the Bounds of a Memory Buffer in Linux

Use After Free in NPU

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN

Use After Free in Camera Driver

Buffer Copy Without Checking Size of Input in Audio

Improper Validation of Array Index in HLOS

Improper Restriction of Operations within the Bounds of a Memory Buffer in HLOS

Integer Overflow to Buffer Overflow in User Identity Module

Use of Out-of-range Pointer Offset in Video

Use After Free in HLOS

Improper Restriction of Operations within the Bounds of a Memory Buffer in Automotive

Buffer Copy Without Checking Size of Input in Audio

Buffer Copy Without Checking Size of Input in Automotive Audio

Buffer Copy Without Checking Size of Input in WLAN Host

Use After Free in Audio

Buffer Copy Without Checking Size of Input in SPS Applications

Use of Out-of-range Pointer Offset in PCIe

Buffer Over-read in Trusted Execution Environment

Use After Free in Audio

Use After Free in HLOS

Integer Overflow or Wraparound in HLOS

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Audio

Buffer Copy Without Checking Size of Input in HLOS

Use of Out-of-range Pointer Offset in Audio

Configuration Issue in Core

Buffer Copy Without Checking Size of Input in Audio

Buffer Copy Without Checking Size of Input in Audio

Use After Free in HLOS

Use of Out-of-range Pointer Offset in Camera Driver

Possible memory corruption due to Improper handling of hypervisor unmap operations for concurrent memory operations in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

Buffer Copy Without Checking Size of Input in Graphics Linux