Qualcomm WCD9385

Use after free in camera If the threadmanager is being cleaned up while the worker thread is processing objects in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

Improper size validation of QXDM commands can lead to memory corruption in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

Improper validation of buffer size input to the EFS file can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Possible out of bound access due to improper validation of item size and DIAG memory pools data while switching between USB and PCIE interface in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Improper authentication in Qualcomm IPC

Buffer Copy Without Checking Size of Input in Audio

While waiting for a response to a callback or listener request, non-secure clients can change permissions to shared memory buffers used by HLOS Invoke Call to secure kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

Possible access control violation while setting current permission for VMIDs due to improper permission masking in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking

Stack-based Buffer Overflow in WLAN Windows Host

Use After Free in DSP Services

Use of Out-of-range Pointer Offset in Computer Vision

Use After Free in Computer Vision

Improper Input Validation in Secure Processor

Memory corruption due to double free issue in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in FM Host

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in FM Host

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Computer Vision

Integer Overflow to Buffer Overflow in Modem

Integer overflow to buffer overflow in User Identity Module

Memory corruption in audio due to lack of check of invalid routing address into APR Routing table in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Memory corruption in kernel due to use after free issue in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

Out of bounds writing is possible while verifying device IDs due to improper length check before copying the data in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Camera_Linux

Configuration weakness in modem

Buffer copy without checking the size of input in HLOS

Incorrect Type Conversion or Cast in Trusted Execution Environment

Use after free in WLAN

Stack based buffer overflow in Core

NULL Pointer Dereference in Display

Improper Validation of Array Index in Audio

Improper Validation of Array Index in Camera

Improper Restriction of Operations within the Bounds of a Memory Buffer in HLOS

Buffer Copy Without Checking Size of Input (Classic Buffer Overflow) in Wearables

Integer Overflow or Wraparound in Radio Interface Layer

Buffer Copy Without Checking Size of Input in WLAN HOST

Stack-based Buffer Overflow in WLAN HOST

Improper Validation of Array Index in WLAN HAL

Buffer Copy without Checking the Size of Input(Classic Buffer Overflow) in Core Platform

Buffer Over-read in WLAN Host

Buffer Over-read in WLAN HOST