Qualcomm QCN6024

Integer Overflow to Buffer Overflow in User Identity Module

Improper Restriction of Operations within the Bounds of a Memory Buffer in Linux Boot Loader

Configuration Issue in Core

Use After Free in GPS HLOS Driver

Buffer Copy Without Checking Size of Input in Trusted Execution Environment

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Qualcomm IPC

Use After Free in WLAN Host Communication

Permissions, Privileges, and Access Control issues in TZ Secure OS

Use After Free in Computer Vision

Buffer Copy Without Checking Size of Input in Graphics Linux

Buffer Over-read in Trusted Execution Environment

Out-of-bounds Write in Computer Vision

Integer Overflow or Wraparound in Audio

Cryptographic Issues in Automotive

Buffer Copy Without Checking Size of Input in Video

Out-of-bounds Write in Display

Incorrect Calculation of Buffer Size in HLOS

Double Free in SPS-HLOS

Time-of-check Time-of-use (TOCTOU) Race Condition in Trusted Execution Environment

Buffer Copy Without Checking Size of Input in Core Services

Use of Uninitialized Variable in HLOS

Use After Free in HLOS

Improper Access Control in Automotive Multimedia

Out-of-bounds Write in HLOS

NULL Pointer Dereference in SPS Applications

Buffer Over-read in Graphics

Buffer Copy Without Checking Size of Input in HLOS

Out-of-bounds Write in Windows Compute

Exposure of Sensitive System Information to an Unauthorized Control Sphere in KERNEL

Key Management Errors in HLOS

Buffer Over-read in WLAN Firmware

Improper Input Validation in Services

Buffer over-read while processing NDL attribute if attribute length is larger than expected and then FW is treating it as more number of immutable schedules in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

Denial of service in WLAN due to out-of-bound read happens while processing VHT action frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Configuration Issue in WLAN Host and Firmware

Allowing RTT frames to be linked with non randomized MAC address by comparing the sequence numbers can lead to information disclosure. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

Improper authentication of EAP WAPI EAPOL frames from unauthenticated user can lead to information disclosure in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking

Improper authentication of sub-frames of a multicast AMSDU frame can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Improper Input Validation in Modem

Possible buffer over read due to improper validation of IE size while parsing beacon from peer device in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking