Qualcomm SA8195P

Memory corruption occurs while processing command received from HLOS due to improper length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Memory corruption in automotive multimedia due to use of out-of-range pointer offset while parsing command request packet with a very large type value. in Snapdragon Auto

Memory Corruption during wma file playback due to integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Improper validation of backend id in PCM routing process can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

Incorrect type conversion in WLAN

Buffer copy without checking size of input in modem

Buffer copy without checking the size of input in WLAN HAL.

Memory corruption in graphics due to buffer overflow while validating the user address in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Return of Stack Variable Address in Buses

Use After Free in Linux Graphics

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Kernel

Use After Free in Graphics

Use after free in Neural Processing Unit

Use of Out-of-range Pointer Offset in Audio

Improper validation of array index in Android Core

Integer overflow to buffer overflow in Automotive Multimedia

Use After Free in Graphics Linux

Integer Overflow or Wraparound in Audio

Improper validation of array index in WLAN HAL

Integer Overflow in Multimedia Framework

Stack-based Buffer Overflow in Automotive GPU

Integer overflow or wraparound in WLAN

Improper input validation in Automotive Android OS

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN HAL

Stack-based Buffer Overflow in WIN Product

Integer Overflow or Wraparound in Audio

Double free in Linux Networking

Double free in Automotive

Use After Free in Audio

Use After Free in Graphics

Integer Overflow or Wraparound in Audio

Use After Free in Graphics Linux

Use After Free in Graphics Linux

Use After Free in DSP Service

Use of Out-of-range Pointer Offset in Audio

Use After Free in Automotive Display

Buffer Copy Without Checking Size of Input in SPS Applications

Use After Free in Graphics Linux

Use After Free in Graphics Linux

Access of Uninitialized Pointer in SPS Applications