Qualcomm WCN3950 Firmware any version

Integer overflow to buffer overflow in WLAN

Memory corruption in synx driver due to use-after-free condition in the synx driver due to accessing object handles without acquiring lock in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

Memory corruption due to out of bound read while parsing a video file in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

Memory corruption occurs while processing command received from HLOS due to improper length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Improper validation of backend id in PCM routing process can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

Out of bound write in DSP service due to improper bound check for response buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Memory corruption in graphic driver due to use after free while calling multiple threads application to driver. in Snapdragon Consumer IOT

Memory Corruption during wma file playback due to integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Use of Out-of-range Pointer Offset in MODEM

Use of Out-of-range Pointer Offset in Data Modem

Memory corruption in graphics due to buffer overflow while validating the user address in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Return of Stack Variable Address in Buses

Use after free in Neural Processing Unit

Use After Free in Linux Graphics

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Kernel

Use After Free in Graphics Linux

Integer Overflow or Wraparound in Audio

Use After Free in Audio

Stack-based Buffer Overflow in WIN Product

Integer Overflow or Wraparound in Audio

Use After Free in Graphics

Integer Overflow in Multimedia Framework

Integer Overflow or Wraparound in Audio

Double free in Automotive

Improper Restriction of Operations within the Bounds of a Memory Buffer in Hypervisor

Use After Free in Graphics Linux

Use After Free in Graphics Linux

Use After Free in Automotive Multimedia

Use After Free in Kernel

Use After Free in DSP Service

Use After Free in DSP Services

Access of Uninitialized Pointer in SPS Applications

Use After Free in Graphics Linux

Use After Free in Graphics Linux

Use After Free in Automotive Telematics

Use After Free in Graphics Linux

Use After Free in Automotive Multimedia

Improper Input Validation in HLOS

Improper access control in Qualcomm IPC

Improper Validation of Array Index in Hypervisor