Qualcomm QCS2290

Possible null pointer dereference in thread cache operation handler due to lack of validation of user provided input in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Incorrect pointer argument passed to trusted application TA could result in un-intended memory operations in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT

Improper validation of buffer size input to the EFS file can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Buffer Copy Without Checking Size of Input in Audio

Improper authentication in Qualcomm IPC

While waiting for a response to a callback or listener request, non-secure clients can change permissions to shared memory buffers used by HLOS Invoke Call to secure kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

Possible access control violation while setting current permission for VMIDs due to improper permission masking in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in FM Host

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in FM Host

Integer Overflow to Buffer Overflow in Modem

Integer overflow to buffer overflow in User Identity Module

Improper Validation of Array Index in Audio

Improper Authorization in HLOS

Memory corruption in audio due to lack of check of invalid routing address into APR Routing table in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Buffer copy without checking the size of input in HLOS

Configuration weakness in modem

Improper validation of array index in User Identity Module

Improper Restriction of Operations within the Bounds of a Memory Buffer in MPP Performance

Improper Restriction of Operations within the Bounds of a Memory Buffer in UTILS

Use After Free in NPU

Integer Overflow or Wraparound in Radio Interface Layer

Improper Validation of Array Index in WLAN HAL

Improper Validation of Array Index in WLAN HAL

Buffer Copy without Checking the Size of Input in WLAN Firmware

Stack-based Buffer Overflow in WLAN HOST

Buffer Copy Without Checking Size of Input in WLAN HAL

Buffer Copy Without Checking Size of Input in WLAN HOST

Improper Input Validation in Audio

Use of Out-of-range Pointer Offset in Qualcomm IPC

Improper Access control in GPU Subsystem

Buffer Copy Without Checking Size of Input in WLAN HAL

Buffer Copy Without Checking Size of Input in WLAN HOST

Buffer Over-read in WLAN HOST

Improper Validation of Array Index in WLAN HAL

Use of Out-of-range Pointer Offset in WLAN HAL

Buffer Copy Without Checking Size of Input in SPS Applications

Integer Overflow to Buffer Overflow in User Identity Module

Use of Out-of-range Pointer Offset in PCIe

Use of Out-of-range Pointer Offset in Video

Improper Validation of Array Index in HLOS