Qualcomm WCD3990

Buffer Copy Without Checking Size of Input in Audio

Buffer Copy Without Checking Size of Input in Audio

Use of Out-of-range Pointer Offset in Audio

Integer Overflow or Wraparound in HLOS

Configuration Issue in Core

Use After Free in HLOS

Possible memory corruption due to Improper handling of hypervisor unmap operations for concurrent memory operations in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

Use After Free in GPS HLOS Driver

Buffer Copy Without Checking Size of Input in Trusted Execution Environment

Use After Free in Automotive GPU

Improper Input Validation in Automotive

Stack-based Buffer Overflow in Performance

Out-of-bounds Write in SPS Applications

Use After Free in Computer Vision

Detection of Error Condition Without Action in Hypervisor

Untrusted Pointer Dereference in Automotive Android OS

Integer Overflow to Buffer Overflow in Audio

Buffer Copy Without Checking Size of Input in Graphics Linux

Use After Free in GPS

Out-of-bounds Write in Computer Vision

Out-of-bounds Write in Computer Vision

Integer Overflow or Wraparound in WLAN HOST

Use After Free in Graphics

Use After Free in Video

Devices with keyprotect off may store unencrypted keybox in RPMB and cause cryptographic issue in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Improper access control in Kernel

Improper Access Control in Hypervisor

Cryptographic Issues in Automotive

Buffer Copy Without Checking Size of Input in Core Services

Out-of-bounds Write in Video

Buffer Copy Without Checking Size of Input in Video

Improper Validation of Array Index in Automotive Autonomy

Improper Access Control in Core

Double Free in SPS-HLOS

Incorrect Calculation of Buffer Size in Video

Out-of-bounds Write in Audio

Improper Access Control in Automotive Multimedia

Use of Out-of-range Pointer Offset in Audio

Improper Access Control Applied to Mirrored or Aliased Memory Regions in Hypervisor

Buffer Copy Without Checking Size of Input in HLOS