Qualcomm SA4155P Firmware

Possible out of bound read due to improper length calculation of WMI message. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Use After Free in DSP Services

Improper Restriction of Operations within the Bounds of a Memory Buffer in BT Controller

Buffer Copy Without Checking Size of Input in Boot

Use of Out-of-range Pointer Offset in Audio

Buffer Copy without Checking Size of Input (`Classic Buffer Overflow`) in Core

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Radio Interface Layer

Buffer Copy Without Checking Size of Input in Audio

Improper authentication in Qualcomm IPC

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in FM Host

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in FM Host

Improper Authorization in HLOS

Buffer copy without checking the size of input in HLOS

Buffer Copy Without Checking Size of Input (Classic Buffer Overflow) in Wearables

Buffer Over-read in WLAN HOST

Use of Out-of-range Pointer Offset in WLAN HAL

Improper Validation of Array Index in WLAN HAL

Improper Restriction of Operations within the Bounds of a Memory Buffer in Automotive

Improper Input Validation in WLAN HOST

Improper Input Validation in Audio

Buffer Copy without Checking the Size of Input(Classic Buffer Overflow) in Core Platform

Buffer Copy without Checking the Size of Input(Classic Buffer Overflow) in Core Platform

Improper Access control in GPU Subsystem

Buffer Copy Without Checking Size of Input in WLAN HOST

Use of Out-of-range Pointer Offset in Qualcomm IPC

Buffer Copy Without Checking Size of Input in WLAN HOST

Stack-based Buffer Overflow in WLAN HOST

Buffer Copy Without Checking the Size of Input in Audio

Use After Free in HLOS

Buffer Copy Without Checking Size of Input in Automotive Audio

Signed-to-unsigned conversion error in Audio

Buffer Copy Without Checking Size of Input in Audio

Buffer Copy Without Checking Size of Input in SPS Applications

Buffer Copy Without Checking Size of Input in Audio

Improper Restriction of Operations within the Bounds of a Memory Buffer in Automotive

Use After Free in Audio

Improper Validation of Array Index in HLOS

Use After Free in Automotive Audio

Use After Free in Audio

Use of Out-of-range Pointer Offset in PCIe