Qualcomm WCD3988

Integer Overflow or Wraparound in DSP Service

Improper Validation of Array Index in Automotive Autonomy

Improper Access Control in Core

Double Free in Graphics

Incorrect Calculation of Buffer Size in Video

Double Free in SPS-HLOS

Buffer Copy Without Checking Size of Input in Core Services

Out-of-bounds Write in Audio

Buffer Copy Without Checking Size of Input in DSP Service

Use After Free in HLOS

Buffer Copy without Checking Size of Input in DSP Service

Improper Access Control in Automotive Multimedia

Out-of-bounds Write in HLOS

Use of Uninitialized Variable in HLOS

Use of Out-of-range Pointer Offset in Audio

Buffer Over-read in Camera

Buffer Over-read in Camera

NULL Pointer Dereference in HLOS

Out-of-bounds Write in HLOS

NULL Pointer Dereference in SPS Applications

Buffer Over-read in Camera

Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Linux

Use After Free in Automotive GPU

Time-of-check Time-of-use (TOCTOU) Race Condition in Camera_Linux

Buffer Over-read in Graphics

Buffer Copy Without Checking Size of Input in HLOS

Use After Free in Automotive Audio

Use After Free in Automotive Audio

Out-of-bounds Write in Automotive

Use After Free in Automotive Audio

Use After Free in Automotive Audio

Use After Free in Automotive Audio

Out-of-bounds Write in DSP Service

Improper Access Control for Register Interface in SCE-Mink

Buffer Copy Without Checking Size of Input in Automotive Audio

Out-of-bounds Write in Windows Compute

Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service

APK can load a crafted model into the CDSP which can lead to a compromise of CDSP and other APK`s data executing there in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Exposure of Sensitive System Information to an Unauthorized Control Sphere in KERNEL

Key Management Errors in HLOS