Qualcomm WCD3990

Memory corruption in camera due to buffer copy without checking size of input in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Wearables

Integer Overflow to Buffer Overflow in Modem

Integer overflow to buffer overflow in User Identity Module

Memory corruption in audio due to lack of check of invalid routing address into APR Routing table in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Improper Validation of Array Index in Audio

Configuration weakness in modem

Buffer copy without checking the size of input in HLOS

Use after free in WLAN

Integer Overflow or Wraparound in Radio Interface Layer

Use After Free in NPU

Use After Free in Automotive Android OS

Buffer Copy Without Checking Size of Input in WLAN HOST

Buffer Copy Without Checking Size of Input in WLAN HOST

Improper Validation of Array Index in WLAN HAL

Improper Access control in GPU Subsystem

Buffer Copy without Checking the Size of Input(Classic Buffer Overflow) in Core Platform

Stack-based Buffer Overflow in WLAN HOST

Improper Input Validation in Audio

Improper Input Validation in WLAN HOST

Buffer Over-read in WLAN HOST

Buffer Over-read in WLAN Host

Buffer Copy without Checking the Size of Input(Classic Buffer Overflow) in Core Platform

Improper Restrictions of Operations within the Bounds of a Memory Buffer in Linux

Use-After-Free Issue in Display

Incorrect Type Conversion in Video driver

Double free in Linux-Android

Integer overflow to buffer overflow in Audio

Integer overflow to buffer overflow in Modem

Improper Restriction of Operations within the Bounds of a Memory Buffer in Linux

Use after free in Modem

Use After Free in HLOS

Improper Restriction of Operations within the Bounds of a Memory Buffer in HLOS

Buffer Copy Without Checking Size of Input in Audio

Improper Validation of Array Index in HLOS

Use After Free in Automotive Audio

Use After Free in Audio

Buffer Copy Without Checking Size of Input in WLAN Host

Buffer Copy Without Checking Size of Input in Automotive Audio

Buffer Over-read in Trusted Execution Environment

Integer Overflow or Wraparound in HLOS