Qualcomm WCD3998

Improper authentication in Qualcomm IPC

Buffer Copy Without Checking Size of Input in Audio

While waiting for a response to a callback or listener request, non-secure clients can change permissions to shared memory buffers used by HLOS Invoke Call to secure kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

Possible access control violation while setting current permission for VMIDs due to improper permission masking in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking

Memory corruption due to double free issue in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

Memory corruption in camera due to buffer copy without checking size of input in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Wearables

Memory corruption in diag due to use after free while processing dci packet in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Memory corruption in camera due to improper validation of array index in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Integer Overflow to Buffer Overflow in Modem

Integer overflow to buffer overflow in User Identity Module

Memory corruption in kernel due to use after free issue in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

Memory corruption in audio due to lack of check of invalid routing address into APR Routing table in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Buffer copy without checking the size of input in HLOS

Configuration weakness in modem

Stack based buffer overflow in Core

Use after free in WLAN

Use of out-of-range pointer offset in Audio

Incorrect Type Conversion or Cast in Trusted Execution Environment

Improper validation of array index in User Identity Module

Improper Access control in GPU Subsystem

Buffer Copy Without Checking Size of Input in WLAN HAL

Buffer Copy without Checking the Size of Input(Classic Buffer Overflow) in Core Platform

Improper Input Validation in Audio

Improper Restriction of Operations within the Bounds of a Memory Buffer in Automotive

Improper Input Validation in WLAN HOST

Buffer Copy without Checking the Size of Input(Classic Buffer Overflow) in Core Platform

Incorrect type casting in Display driver

Improper Validation of Array Index in GPS HLOS Driver

Buffer copy without checking the size of input in Core

Improper Restrictions of Operations within the Bounds of a Memory Buffer in Display

Integer overflow to buffer overflow in Audio

Use after free in Core

Double free in Linux-Android

Improper restriction of operations within the bounds of memory buffer in Linux

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN

Buffer over-read in Modem

Incorrect Type Conversion in Video driver

Integer Overflow to Buffer Overflow in RIL

Improper Validation of Array Index in Linux

Integer Overflow to Buffer Overflow in RIL