Qualcomm QCA6431

Integer overflow to buffer overflow in User Identity Module

Improper Authorization in HLOS

Out of bounds writing is possible while verifying device IDs due to improper length check before copying the data in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile

Memory corruption in audio due to lack of check of invalid routing address into APR Routing table in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Memory corruption in kernel due to use after free issue in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

Buffer copy without checking the size of input in HLOS

Configuration weakness in modem

Improper Restriction of Operations within the Bounds of a Memory Buffer in HLOS

Improper validation of array index in User Identity Module

Improper Restriction of Operations within the Bounds of a Memory Buffer in UTILS

Improper Restriction of Operations within the Bounds of a Memory Buffer in MPP Performance

Integer Overflow or Wraparound in Radio Interface Layer

Improper Validation of Array Index in WLAN HAL

Improper Restriction of Operations within the Bounds of a Memory Buffer in WLAN HAL

Use of Out-of-range Pointer Offset in Qualcomm IPC

Buffer Copy without Checking the Size of Input(Classic Buffer Overflow) in Core Platform

Buffer Copy without Checking the Size of Input(Classic Buffer Overflow) in Core Platform

Improper Validation of Array Index in WLAN HAL

Buffer Copy Without Checking Size of Input in WLAN HOST

Buffer Over-read in WLAN HOST

Improper Restriction of Operations within the Bounds of a Memory Buffer in Automotive

Improper Validation of Array Index in WLAN HAL

Improper Validation of Array Index in WLAN HAL

Buffer Over-read in WLAN Host

Improper Validation of Array Index in WLAN HAL

Integer overflow to buffer overflow in Modem

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN

Improper Restriction of Operations within the Bounds of a Memory Buffer in Linux

Integer overflow to buffer overflow in Audio

Improper Restriction of Operations within the Bounds of a Memory Buffer in Automotive

Buffer Copy Without Checking Size of Input in Audio

Buffer Copy Without Checking Size of Input in SPS Applications

Use After Free in Audio

Use of Out-of-range Pointer Offset in PCIe

Use After Free in Audio

Use of Out-of-range Pointer Offset in Video

Buffer Copy Without Checking Size of Input in WLAN Host

Buffer Copy Without Checking Size of Input in Automotive Audio

Buffer Over-read in Trusted Execution Environment

Buffer Copy Without Checking Size of Input in Audio