Qualcomm WCN3680B Firmware

Buffer Copy Without Checking Size of Input in Automotive Audio

Buffer Copy Without Checking Size of Input in Audio

Use After Free in HLOS

Use After Free in HLOS

Use of Out-of-range Pointer Offset in Audio

Buffer Copy Without Checking Size of Input in Audio

Buffer Copy Without Checking Size of Input in Audio

Buffer Copy Without Checking Size of Input in HLOS

Use After Free in HLOS

Use of Out-of-range Pointer Offset in Camera Driver

Improper Input Validation in Video Analytics and Processing

Use After Free in Computer Vision

Buffer Copy Without Checking Size of Input in Graphics Linux

Improper Input Validation in Automotive

Integer Overflow to Buffer Overflow in Audio

Out-of-bounds Write in Computer Vision

Use After Free in Video

Untrusted Pointer Dereference in DSP Service

Time-of-check Time-of-use (TOCTOU) Race Condition in Camera

Improper Access Control in Hypervisor

Buffer Copy Without Checking Size of Input in Core Services

Use After Free in BTHOST

Use After Free in NPU

Use After Free in Camera Driver

Out-of-bounds Write in DSP Service

Out-of-bounds Write in Audio

Improper Access Control in Automotive Multimedia

Use of Out-of-range Pointer Offset in Audio

Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Linux

Use After Free in Automotive Audio

Use After Free in Automotive Audio

Use After Free in Automotive Audio

Use After Free in Automotive Audio

Buffer Copy Without Checking Size of Input in Automotive Audio

Exposure of Sensitive System Information to an Unauthorized Control Sphere in KERNEL

Improper authentication of sub-frames of a multicast AMSDU frame can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Possible out of bound read due to lack of length check of FT sub-elements in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

Possible buffer overflow due to Improper validation of received CF-ACK and CF-Poll data frames in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music

Possible buffer overflow due to lack of length check in BA request in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

Possible buffer out of bound read can occur due to improper validation of TBTT count and length while parsing the beacon response in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking