Qualcomm WCN3988 Firmware any version

Buffer Copy Without Checking Size of Input in DSP Service

Out-of-bounds Write in HLOS

Improper Access Control in Automotive Multimedia

Use After Free in HLOS

Use of Out-of-range Pointer Offset in Audio

Buffer Over-read in Camera

NULL Pointer Dereference in HLOS

Use After Free in Automotive GPU

Buffer Over-read in Camera

Buffer Over-read in Camera

Out-of-bounds Write in HLOS

Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Linux

NULL Pointer Dereference in SPS Applications

Time-of-check Time-of-use (TOCTOU) Race Condition in Camera_Linux

Buffer Over-read in Graphics

Buffer Copy Without Checking Size of Input in HLOS

Use After Free in Automotive Audio

Use After Free in Automotive Audio

Use After Free in Automotive Audio

Use After Free in Automotive Audio

Use After Free in Automotive Audio

Out-of-bounds Write in Automotive

Out-of-bounds Write in DSP Service

Improper Access Control for Register Interface in SCE-Mink

Buffer Copy Without Checking Size of Input in Automotive Audio

Out-of-bounds Write in Windows Compute

Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service

APK can load a crafted model into the CDSP which can lead to a compromise of CDSP and other APK`s data executing there in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Exposure of Sensitive System Information to an Unauthorized Control Sphere in KERNEL

Key Management Errors in HLOS

Buffer Over-read in WLAN Firmware

Improper Input Validation in Services

Improper Validation of Syntactic Correctness of Input in Automotive Linux OS

Buffer Over-read in WLAN Firmware

Use After Free in Graphics

Improper authentication of sub-frames of a multicast AMSDU frame can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Improper Input Validation in Modem

Possible out of bound read due to lack of length check of FT sub-elements in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

Possible buffer overflow due to Improper validation of received CF-ACK and CF-Poll data frames in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music

Possible buffer overflow due to lack of length check in BA request in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile