Qualcomm WCD9335 Firmware

Use After Free in Computer Vision

Integer Overflow or Wraparound in WLAN HOST

Out-of-bounds Write in Computer Vision

Out-of-bounds Write in Computer Vision

Use After Free in Graphics

Improper Release of Memory Before Removing Last Reference in Graphics

Use After Free in Video

Use After Free in Automotive Linux OS

Buffer Copy Without Checking Size of Input in Automotive Platform

Improper access control in Kernel

Integer Overflow or Wraparound in Audio

Buffer Copy Without Checking Size of Input in Core Services

Buffer Copy Without Checking Size of Input in Video

Double Free in SPS-HLOS

Buffer Copy Without Checking Size of Input in Core Services

Out-of-bounds Write in Audio

Use of Uninitialized Variable in HLOS

Improper Access Control in Automotive Multimedia

Use of Out-of-range Pointer Offset in Audio

Use After Free in Automotive GPU

Out-of-bounds Write in HLOS

NULL Pointer Dereference in SPS Applications

Buffer Over-read in Graphics

Buffer Copy Without Checking Size of Input in HLOS

Use After Free in Automotive Audio

Use After Free in Automotive Audio

Use After Free in Automotive Audio

Use After Free in Automotive Audio

Buffer Copy Without Checking Size of Input in Automotive Audio

APK can load a crafted model into the CDSP which can lead to a compromise of CDSP and other APK`s data executing there in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Key Management Errors in HLOS

Improper Validation of Syntactic Correctness of Input in Automotive Linux OS

Use After Free in Graphics

Improper authentication of sub-frames of a multicast AMSDU frame can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Possible out of bound read due to lack of length check of FT sub-elements in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

Possible buffer overflow due to Improper validation of received CF-ACK and CF-Poll data frames in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music

Possible buffer overflow due to lack of length check in BA request in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

Possible buffer out of bound read can occur due to improper validation of TBTT count and length while parsing the beacon response in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking

Possible out of bound read due to lack of length check of Bandwidth-NSS IE in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

Improper handling of received malformed FTMR request frame can lead to reachable assertion while responding with FTM1 frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking