Qualcomm QCA6595 Firmware

Improper Restriction of Operations within the Bounds of a Memory Buffer in BT Controller

Buffer Copy Without Checking Size of Input in Boot

Buffer Copy without Checking Size of Input (`Classic Buffer Overflow`) in Core

Use of Out-of-range Pointer Offset in Audio

Possible out of bound access due to improper validation of function table entries in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Incorrect pointer argument passed to trusted application TA could result in un-intended memory operations in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT

Out of bound write in logger due to prefix size is not validated while prepended to logging string in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Use after free in camera If the threadmanager is being cleaned up while the worker thread is processing objects in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

Improper authentication in Qualcomm IPC

Buffer Copy Without Checking Size of Input in Audio

Buffer Copy without Checking Size of Input in Audio

While waiting for a response to a callback or listener request, non-secure clients can change permissions to shared memory buffers used by HLOS Invoke Call to secure kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

Use After Free in DSP Services

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in FM Host

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in FM Host

Memory corruption due to double free issue in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

Memory corruption in diag due to use after free while processing dci packet in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Improper Authorization in HLOS

NULL Pointer Dereference in Display

Memory corruption in audio due to lack of check of invalid routing address into APR Routing table in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Improper Validation of Array Index in Audio

Improper Input Validation in Automotive OS Platform

Improper Input Validation in Automotive OS Platform

Improper Input Validation in Automotive OS Platform

Improper Input Validation in Automotive OS Platform

Buffer copy without checking the size of input in HLOS

Improper Restriction of Operations within the Bounds of a Memory Buffer in HLOS

Improper Restriction of Operations within the Bounds of a Memory Buffer in MPP Performance

Buffer Copy Without Checking Size of Input (Classic Buffer Overflow) in Wearables

Use After Free in NPU

Use After Free in Automotive Android OS

Improper Validation of Array Index in WLAN HAL

Improper Validation of Array Index in WLAN HAL

Buffer Copy Without Checking Size of Input in WLAN HAL

Buffer Copy Without Checking Size of Input in WLAN HAL

Use of Out-of-range Pointer Offset in WLAN HAL

Improper Validation of Array Index in WLAN HAL

Improper Validation of Array Index in WLAN HAL

Improper Validation of Array Index in WLAN HAL

Improper Input Validation in WLAN HOST