Qualcomm SA6150P

Out-of-bounds Write in Video

Buffer Copy Without Checking Size of Input in Video

Use After Free in BTHOST

Use After Free in NPU

Time-of-check Time-of-use (TOCTOU) Race Condition in Automotive Vehicle Networks

Improper Validation of Array Index in Automotive Autonomy

Use After Free in Camera Driver

Stack-based Buffer Overflow in Automotive Software platform based on QNX

Incorrect Calculation of Buffer Size in Video

Double Free in SPS-HLOS

Stack-based Buffer Overflow in Automotive Software platform based on QNX

Out-of-bounds Write in Audio

Integer Overflow or Wraparound in Automotive Platform

Use of Uninitialized Variable in HLOS

Out-of-bounds Write in HLOS

Improper Access Control in Automotive Multimedia

Use After Free in HLOS

NULL Pointer Dereference in SPS Applications

Out-of-bounds Write in HLOS

NULL Pointer Dereference in HLOS

Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Linux

Use After Free in Automotive GPU

Buffer Over-read in Graphics

Use After Free in Automotive Audio

Use After Free in Automotive Audio

Use After Free in Automotive Audio

Use After Free in Automotive Audio

Out-of-bounds Write in Automotive

Buffer Copy Without Checking Size of Input in Automotive Audio

Out-of-bounds Write in Windows Compute

Key Management Errors in HLOS

Improper Validation of Syntactic Correctness of Input in Automotive Linux OS

Buffer over-read while parsing RPS due to lack of check of input validation on values received from user side. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

Buffer over-read while processing NDL attribute if attribute length is larger than expected and then FW is treating it as more number of immutable schedules in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

Out of bound memory access while processing frames due to lack of check of invalid frames received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Denial of service in WLAN due to out-of-bound read happens while processing VHT action frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Allowing RTT frames to be linked with non randomized MAC address by comparing the sequence numbers can lead to information disclosure. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

Improper authentication of sub-frames of a multicast AMSDU frame can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Possible out of bound read due to lack of length check of FT sub-elements in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

Possible buffer overflow due to lack of length check in BA request in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile