Qualcomm SC8180X+SDX55 Firmware

Improper validation of array index in User Identity Module

Integer Overflow or Wraparound in Radio Interface Layer

Buffer Copy without Checking the Size of Input in WLAN Firmware

Improper Validation of Array Index in WLAN HAL

Improper Restriction of Operations within the Bounds of a Memory Buffer in WLAN HAL

Improper Validation of Array Index in WLAN HAL

Improper Validation of Array Index in WLAN HAL

Buffer Copy Without Checking Size of Input in WLAN HAL

Buffer Copy Without Checking Size of Input in WLAN HAL

Use of Out-of-range Pointer Offset in WLAN HAL

Improper Validation of Array Index in WLAN HAL

Improper Validation of Array Index in WLAN HAL

Improper Validation of Array Index in WLAN HAL

Buffer Copy Without Checking Size of Input in SPS Applications

Integer Overflow to Buffer Overflow in User Identity Module

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Windows Host

Improper Validation of Array Index in Display

Out-of-bounds Read in Windows WLAN Host

Out-of-bounds Read in Windows WLAN Host

Buffer Over-read in Display

Out-of-bounds Read in Windows WLAN Host

Out-of-bounds Read in Windows WLAN Host

Buffer Over-read in Display

Untrusted Pointer Dereference in Camera

Improper access control in Kernel

Use After Free in Camera

Double Free in Display

Buffer Over-read in Camera

Out-of-bounds Write in Display

Use After Free in Display

Time-of-check Time-of-use (TOCTOU) Race Condition in Camera

Time-of-check Time-of-use (TOCTOU) Race Condition in Camera

Time-of-check Time-of-use (TOCTOU) Race Condition in Display

Denial of service in WLAN due to out-of-bound read happens while processing VHT action frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Improper authentication of EAP WAPI EAPOL frames from unauthenticated user can lead to information disclosure in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking

Possible assertion due to improper verification while creating and deleting the peer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

Improper handling of received malformed FTMR request frame can lead to reachable assertion while responding with FTM1 frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

Reachable assertion is possible while processing peer association WLAN message from host and nonstandard incoming packet in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

Buffer over-read in WLAN Firmware

NULL Pointer Dereference in WLAN Firmware