Qualcomm QCS4290 Firmware

Use of Out-of-range Pointer Offset in Qualcomm IPC

Buffer Copy without Checking the Size of Input in WLAN Firmware

Buffer Copy Without Checking Size of Input in WLAN HAL

Stack-based Buffer Overflow in WLAN HOST

Improper Validation of Array Index in WLAN HAL

Improper Validation of Array Index in WLAN HAL

Buffer Copy Without Checking Size of Input in WLAN HOST

Improper Validation of Array Index in WLAN HAL

Improper Restriction of Operations within the Bounds of a Memory Buffer in HLOS

Use After Free in Automotive Audio

Use of Out-of-range Pointer Offset in Video

Use After Free in Audio

Buffer Copy Without Checking Size of Input in Audio

Integer Overflow to Buffer Overflow in User Identity Module

Use of Out-of-range Pointer Offset in PCIe

Buffer Copy Without Checking Size of Input in Audio

Buffer Copy Without Checking Size of Input in SPS Applications

Use After Free in Audio

Improper Validation of Array Index in HLOS

Integer Overflow to Buffer Overflow in Audio

Buffer Over-read in Trusted Execution Environment

Out-of-bounds Write in SPS Applications

Buffer Copy Without Checking Size of Input in Trusted Execution Environment

Permissions, Privileges, and Access Control issues in TZ Secure OS

Use After Free in Computer Vision

Use After Free in GPS HLOS Driver

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Qualcomm IPC

Buffer Copy Without Checking Size of Input in Graphics Linux

Use After Free in Graphics

Improper Release of Memory Before Removing Last Reference in Graphics

Devices with keyprotect off may store unencrypted keybox in RPMB and cause cryptographic issue in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Improper access control in Kernel

Incorrect Calculation of Buffer Size in HLOS

Out-of-bounds Write in Display

Double Free in SPS-HLOS

Use After Free in Automotive GPU

NULL Pointer Dereference in SPS Applications

Buffer Over-read in Graphics

Buffer Copy Without Checking Size of Input in HLOS

Use After Free in Automotive Audio