Qualcomm SA8540p Firmware

Improper Validation of Array Index in WLAN Host Communication

Buffer Over-read in WLAN Host Cmn

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Audio

Integer Overflow to Buffer Overflow in Automotive

Non-secure region can try modifying RG permissions of IO space xPUs due to improper input validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Improper Input Validation in Services

Buffer Copy without Checking Size of Input in HLOS

Possible hypervisor memory corruption due to TOC TOU race condition when updating address mappings in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

Buffer copy without checking the size of input in Core

Buffer copy without checking size of input in Hypervisor

Integer overflow or wraparound in Core

Incorrect Type Conversion or Cast in Core

Buffer copy without checking size of Input in Core

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in TZ Secure OS

Buffer Copy Without Checking Size of Input in Hypervisor

Time-of-check time-of-use race condition in Core

Double free in Core

Untrusted Pointer Dereference in Automotive

Integer Overflow to Buffer Overflow in TZ Secure OS

Improper Input Validation in Automotive OS Platform

Improper Input Validation in Hypervisor

Improper Access Control in Kernel

Double free in Core

Stack-based buffer overflow in Core

Stack based buffer overflow in Core

Improper handling of multiple session supported by PVM backend can lead to use after free in Snapdragon Auto, Snapdragon Mobile

Improper buffer initialization on the backend driver can lead to buffer overflow in Snapdragon Auto

Integer Overflow to Buffer Overflow in HLOS

Use After Free in Graphics

Integer Overflow to Buffer Overflow in Automotive OS Platform

Stack based buffer overflow in Core

Integer Overflow or Wraparound in Display

Possible memory corruption in kernel while performing memory access due to hypervisor not correctly invalidated the processor translation caches in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

Memory corruption due to untrusted pointer dereference in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

Use After Free in SCE-Mink

Memory corruption in multimedia due to improper check on the messages received. in Snapdragon Auto

Memory corruption in multimedia due to improper length check while copying the data in Snapdragon Auto

Out of bound write in DSP service due to improper bound check for response buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Improper Authentication in Core

Memory corruption in automotive multimedia due to use of out-of-range pointer offset while parsing command request packet with a very large type value. in Snapdragon Auto