Qualcomm SD888 Firmware

Use of Out-of-range Pointer Offset in MODEM

Buffer copy without checking size of input in modem

Memory corruption in graphics due to buffer overflow while validating the user address in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Return of Stack Variable Address in Buses

Use After Free in Linux Graphics

Use of Out-of-range Pointer Offset in Audio

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Kernel

Integer Overflow in Multimedia Framework

Improper validation of array index in WLAN HAL

Integer Overflow or Wraparound in Audio

Use After Free in Graphics

Integer Overflow or Wraparound in Audio

Integer Overflow or Wraparound in Audio

Buffer copy without checking size of input in Modem

Use After Free in Kernel

Buffer Copy without Checking Size of Input (`Classic Buffer Overflow`) in SPS-Applications

Use After Free in DSP Service

Use After Free in Graphics Linux

Use After Free in Graphics Linux

Use of Out-of-range Pointer Offset in Audio

Buffer Copy Without Checking Size of Input in SPS Applications

Possible null pointer dereference due to race condition between timeline fence signal and time line fence destroy in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

Improper Validation of Array Index in Hypervisor

Buffer Over-read in MProc

Double Free in HLOS

Memory corruption in display due to time-of-check time-of-use race condition during map or unmap in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Memory corruption in display due to time-of-check time-of-use of metadata reserved size in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Information disclosure in Bluetooth driver due to buffer over-read while reading l2cap length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Buffer over-read in Bluetooth Host.

Information disclosure due to buffer over-read in WLAN firmware while parsing security context info attributes. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Buffer over-read in WLAN

Buffer over-read in WLAN

Buffer over-read in WLAN

Buffer Over-read in Data Modem

Buffer Over-read in Data Modem

Buffer Over-read in Data Network Stack & Connectivity

Buffer Over-read in Multi Mode Call Processor

Buffer Over-read in Data Network Stack & Connectivity

Buffer Over-read in Data Network Stack & Connectivity

Buffer Over-read in Data Network Stack & Connectivity