Qualcomm SM7315 Firmware any version

Improper Restriction of Operations within the Bounds of a Memory Buffer in HLOS

Buffer Over-read in Trusted Execution Environment

Use of Out-of-range Pointer Offset in Video

Improper Validation of Array Index in HLOS

Buffer Copy Without Checking Size of Input in SPS Applications

Integer Overflow to Buffer Overflow in User Identity Module

Signed-to-unsigned conversion error in Audio

Buffer Copy Without Checking Size of Input in Audio

Integer Overflow or Wraparound in Core Services

Use After Free in Audio

Use of Out-of-range Pointer Offset in PCIe

Use After Free in Audio

Buffer Copy Without Checking Size of Input in Audio

Use After Free in Automotive Audio

Integer Overflow or Wraparound in HLOS

Buffer Copy Without Checking Size of Input in Audio

Use of Out-of-range Pointer Offset in Audio

Buffer Copy Without Checking Size of Input in Audio

Buffer Copy Without Checking Size of Input in Trusted Execution Environment

Buffer Over-read in Trusted Execution Environment

Use After Free in Computer Vision

Integer Overflow to Buffer Overflow in Audio

Out-of-bounds Write in SPS Applications

Out-of-bounds Write in Computer Vision

Devices with keyprotect off may store unencrypted keybox in RPMB and cause cryptographic issue in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Improper access control in Kernel

Memory corruption or temporary denial of service due to improper handling of concurrent hypervisor operations to attach or detach IRQs from virtual interrupt sources in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

memory corruption in Kernel due to race condition while getting mapping reference in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

Out-of-bounds Write in Video

Out-of-bounds Write in Display

Incorrect Calculation of Buffer Size in HLOS

Improper Access Control in Core

Incorrect Calculation of Buffer Size in Video

Improper Access Control in Automotive Multimedia

Buffer Copy Without Checking Size of Input in HLOS

APK can load a crafted model into the CDSP which can lead to a compromise of CDSP and other APK`s data executing there in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Key Management Errors in HLOS

Improper Input Validation in Modem

Possible out of bound read due to lack of length check of FT sub-elements in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

Possible buffer overflow due to lack of length check in BA request in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile