Qualcomm WCD9370

Buffer Copy Without Checking Size of Input in DSP Service

Out-of-bounds Write in HLOS

Use After Free in HLOS

Improper Access Control in Automotive Multimedia

Untrusted Pointer Dereference in Video

Buffer Copy without Checking Size of Input in DSP Service

Use of Uninitialized Variable in HLOS

Use of Out-of-range Pointer Offset in Audio

Improper Access Control Applied to Mirrored or Aliased Memory Regions in Hypervisor

Buffer Over-read in Camera

Use After Free in Automotive GPU

Time-of-check Time-of-use (TOCTOU) Race Condition in Camera

Buffer Over-read in Camera

NULL Pointer Dereference in HLOS

Time-of-check Time-of-use (TOCTOU) Race Condition in Camera

Time-of-check Time-of-use (TOCTOU) Race Condition in Camera

NULL Pointer Dereference in SPS Applications

Buffer Over-read in Camera

Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Linux

Out-of-bounds Write in HLOS

Buffer Over-read in Graphics

Buffer Copy Without Checking Size of Input in HLOS

Use After Free in Automotive Audio

Untrusted Pointer Dereference in Camera

Use After Free in Automotive Audio

Use After Free in Automotive Audio

Use After Free in Automotive Audio

Out-of-bounds Write in Automotive

Use After Free in Automotive Audio

Out-of-bounds Write in DSP Service

Out-of-bounds Write in Video

Out-of-bounds Write in DSP Service

Improper Access Control for Register Interface in SCE-Mink

Buffer Copy Without Checking Size of Input in Automotive Audio

Time-of-check Time-of-use (TOCTOU) Race Condition in Display

Buffer Over-read in Qualcomm IPC

Out-of-bounds Write in Windows Compute

Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service

Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service

APK can load a crafted model into the CDSP which can lead to a compromise of CDSP and other APK`s data executing there in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables