Qualcomm QCN9074 any version

Buffer Over-read in Bluetooth HOST

Improper handling of ASB-C broadcast packets with crafted opcode in LMP can lead to uncontrolled resource consumption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

Improper Restriction of Operation within the Bounds of a Memory Buffer in TZ Secure OS

Improper Access Control for Register Interface in TZ Firmware

Out-of-bounds Read in Core

Out-of-bounds Read in Core

Improper Input Validation in TZ Firmware

Untrusted Pointer Dereference in TZ Firmware

Information Exposure in Graphics

Buffer over read could occur due to incorrect check of buffer size while flashing emmc devices in Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Buffer Over-read in WLAN Host

Buffer Over-read in Qualcomm IPC

Buffer Over-read in WLAN HAL

Buffer Over-read in IOE Firmware

Buffer Over-read in WLAN HOST

Buffer Over-read in Audio

Buffer Over-read in Automotive Multimedia

Buffer Over-read in Audio

Buffer Over-read in Audio

Buffer Over-read in Neural Processing Unit

Buffer Over-read in Audio

Buffer Over-read in Core Services

Out of bound read access in hypervisor due to an invalid read access attempt by passing invalid addresses in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

Information Exposure in DSP Services

Possible buffer over read due to lack of size validation while copying data from DBR buffer to RX buffer and can lead to Denial of Service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Information Exposure in TZ Secure OS

Improper Validation of Array Index in Audio

Improper Authorization in SPS-HLOS

Buffer Over-read in Audio

Possible denial of service scenario can occur due to lack of length check on Channel Switch Announcement IE in beacon or probe response frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking