Qualcomm WCN3610

Improper Restrictions of Operations within the Bounds of a Memory Buffer in Linux

Improper Validation of Array Index in GPS HLOS Driver

Improper Restriction of Operations within the Bounds of a Memory Buffer in Linux

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN

Improper Restrictions of Operations within the Bounds of a Memory Buffer in Display

Incorrect type casting in Display driver

Use-After-Free Issue in Display

Incorrect Type Conversion in Video driver

Buffer copy without checking the size of input in Core

Buffer copy without checking the size of input in Core

Double free in Linux-Android

Buffer copy without checking the size of input in FM Host

Buffer Copy without Checking Size of Input in Data Network Stack & Connectivity

Use after free in Core

Use After Free in HLOS

Integer overflow to buffer overflow in Audio

Improper restriction of operations within the bounds of memory buffer in Linux

Integer overflow to buffer overflow in Modem

Use after free in Modem

Integer Overflow to Buffer Overflow in RIL

Integer Overflow or Wraparound in Display

Improper Restriction of Operations within the Bounds of a Memory Buffer in Audio

Integer Overflow to Buffer Overflow in RIL

Improper Validation of Array Index in Linux

Improper Validation of Array Index in HLOS

Buffer Copy Without Checking Size of Input in Automotive Audio

Use of Out-of-range Pointer Offset in Audio

Buffer Copy Without Checking Size of Input in Audio

Buffer Copy Without Checking Size of Input in HLOS

Buffer Copy Without Checking Size of Input in Audio

Use After Free in HLOS

Improper Input Validation in Video Analytics and Processing

Buffer Copy Without Checking Size of Input in Graphics Linux

Integer Overflow to Buffer Overflow in Audio

Use of Out-of-range Pointer Offset in Audio

APK can load a crafted model into the CDSP which can lead to a compromise of CDSP and other APK`s data executing there in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Out of bound memory access while processing frames due to lack of check of invalid frames received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Divide by zero issue can happen while updating delta extension header due to improper validation of master SN and extension header SN in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Potential UE reset while decoding a crafted Sib1 or SIB1 that schedules unsupported SIBs and can lead to denial of service in Snapdragon Auto, Snapdragon Mobile

Improper authentication of sub-frames of a multicast AMSDU frame can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking