Qualcomm SD865 5G Firmware

Buffer Copy Without Checking Size of Input in Video

Use After Free in Computer Vision

Use After Free in Computer Vision

Use After Free in Camera Driver

Out-of-bounds Write in Display

Improper Validation of Array Index in Automotive Autonomy

Incorrect Calculation of Buffer Size in HLOS

Improper Access Control in Core

Double Free in SPS-HLOS

Incorrect Calculation of Buffer Size in Video

Out-of-bounds Write in Audio

Use of Uninitialized Variable in HLOS

Improper Access Control Applied to Mirrored or Aliased Memory Regions in Hypervisor

Out-of-bounds Write in HLOS

Untrusted Pointer Dereference in Camera

Untrusted Pointer Dereference in Power Optimization Firmware

Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Linux

Time-of-check Time-of-use (TOCTOU) Race Condition in Camera_Linux

Buffer Over-read in Graphics

Use After Free in Automotive Audio

Use After Free in Automotive Audio

Use After Free in Automotive Audio

Out-of-bounds Write in Computer Vision

Use After Free in Automotive Audio

Out-of-bounds Write in DSP Service

Buffer Copy Without Checking Size of Input in Automotive Audio

Out-of-bounds Write in Windows Compute

Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service

Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service

APK can load a crafted model into the CDSP which can lead to a compromise of CDSP and other APK`s data executing there in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Exposure of Sensitive System Information to an Unauthorized Control Sphere in KERNEL

Key Management Errors in HLOS

Denial of service in WLAN due to out-of-bound read happens while processing VHT action frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Improper authentication of EAP WAPI EAPOL frames from unauthenticated user can lead to information disclosure in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking

Improper authentication of sub-frames of a multicast AMSDU frame can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Improper Input Validation in Modem

Possible out of bound read due to lack of length check of FT sub-elements in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

Possible buffer overflow due to lack of length check in BA request in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

Possible buffer over read due to improper validation of IE size while parsing beacon from peer device in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking

Possible buffer over read due to lack of alignment between map or unmap length of IPA SMMU and WLAN SMMU in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking