Qualcomm SA6155

Improper validation of backend id in PCM routing process can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

Out of bound write in DSP service due to improper bound check for response buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Improper Authentication in Core

Memory corruption in automotive multimedia due to use of out-of-range pointer offset while parsing command request packet with a very large type value. in Snapdragon Auto

Memory Corruption during wma file playback due to integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Memory corruption occurs while processing command received from HLOS due to improper length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Buffer copy without checking the size of input in WLAN HAL.

Buffer copy without checking size of input in modem

Incorrect type conversion in WLAN

Memory corruption in graphics due to buffer overflow while validating the user address in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Use of Out-of-range Pointer Offset in Audio

Integer overflow to buffer overflow in Automotive Multimedia

Double free in Automotive

Integer Overflow or Wraparound in Audio

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN HAL

Stack-based Buffer Overflow in Automotive GPU

Integer overflow or wraparound in WLAN

Use After Free in Graphics

Stack-based Buffer Overflow in WIN Product

Integer Overflow or Wraparound in Audio

Improper validation of array index in WLAN HAL

Integer Overflow or Wraparound in Audio

Double free in Linux Networking

Improper Restriction of Operations within the Bounds of a Memory Buffer in Hypervisor

Use of Out-of-range Pointer Offset in Audio

Buffer Copy without Checking Size of Input (`Classic Buffer Overflow`) in SPS-Applications

Improper Input Validation in HLOS

Use After Free in Kernel

Buffer Copy Without Checking Size of Input in SPS Applications

Use After Free in Automotive Display

Improper Validation of Array Index in Hypervisor

Possible use after free in Display due to race condition while creating an external display in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Possible null pointer dereference due to race condition between timeline fence signal and time line fence destroy in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

Buffer Over-read in MProc

Double Free in HLOS

Improper Access Control in Graphics Linux

Memory corruption in display due to time-of-check time-of-use of metadata reserved size in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Time-of-check Time-of-use (TOCTOU) Race Condition in Hypervisor

Information disclosure due to buffer over-read in Bluetooth HOST while pairing and connecting A2DP. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Information disclosure in Bluetooth driver due to buffer over-read while reading l2cap length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables