Qualcomm WCD9360 any version

While waiting for a response to a callback or listener request, non-secure clients can change permissions to shared memory buffers used by HLOS Invoke Call to secure kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

Use After Free in Qualcomm IPC

Integer Overflow to Buffer Overflow in Modem

Integer overflow to buffer overflow in User Identity Module

Improper Validation of Array Index in Audio

Memory corruption in audio due to lack of check of invalid routing address into APR Routing table in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Configuration weakness in modem

Use after free in WLAN

Buffer Copy Without Checking Size of Input (Classic Buffer Overflow) in Wearables

Integer Overflow or Wraparound in Radio Interface Layer

Use After Free in NPU

Buffer Over-read in WLAN Host

Improper Validation of Array Index in WLAN HAL

Improper Validation of Array Index in WLAN HAL

Buffer Over-read in WLAN HOST

Buffer Copy Without Checking Size of Input in WLAN HAL

Buffer Copy without Checking the Size of Input in WLAN Firmware

Improper Validation of Array Index in WLAN HAL

Improper Input Validation in WLAN HOST

Improper Restrictions of Operations within the Bounds of a Memory Buffer in Linux

Integer overflow to buffer overflow in Audio

Integer Overflow to Buffer Overflow in RIL

Integer Overflow to Buffer Overflow in RIL

Improper Validation of Array Index in Linux

Buffer Copy Without Checking Size of Input in Automotive Audio

Possible memory corruption due to Improper handling of hypervisor unmap operations for concurrent memory operations in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

Integer Overflow to Buffer Overflow in Audio

Out-of-bounds Write in Audio

Improper Access Control in Automotive Multimedia

Use of Out-of-range Pointer Offset in Audio

Buffer Copy Without Checking Size of Input in HLOS

Use After Free in Automotive Audio

Buffer Copy Without Checking Size of Input in Automotive Audio

Buffer over-read while parsing RPS due to lack of check of input validation on values received from user side. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

Buffer over-read while processing NDL attribute if attribute length is larger than expected and then FW is treating it as more number of immutable schedules in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

Out of bound memory access while processing frames due to lack of check of invalid frames received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Divide by zero issue can happen while updating delta extension header due to improper validation of master SN and extension header SN in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Allowing RTT frames to be linked with non randomized MAC address by comparing the sequence numbers can lead to information disclosure. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

Improper authentication of sub-frames of a multicast AMSDU frame can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Improper Input Validation in Modem