Qualcomm WSA8832

Missing Authentication for Critical Function in Data Modem

Permissions, Privileges, and Access Controls in Video Analytics and Processing

Integer Overflow or Wraparound in Graphics

Denial of service due to memory corruption while extracting ape header from clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Potential memory leak in modem during the processing of NSA RRC Reconfiguration with invalid Radio Bearer Config in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile

Possible buffer overflow due to lack of validation for the length of NAI string read from EFS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile

Use After Free in DSP Services

Buffer Copy without Checking Size of Input (`Classic Buffer Overflow`) in Core

Improper Restriction of Operations within the Bounds of a Memory Buffer in BT Controller

Improper authentication in Qualcomm IPC

Use After Free in DSP Services

Use of Out-of-range Pointer Offset in Computer Vision

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in FM Host

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Computer Vision

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in FM Host

Memory corruption in audio due to lack of check of invalid routing address into APR Routing table in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Out of bounds writing is possible while verifying device IDs due to improper length check before copying the data in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile

Memory corruption in kernel due to use after free issue in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

Buffer copy without checking the size of input in HLOS

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Camera_Linux

NULL Pointer Dereference in Display

Improper Validation of Array Index in Camera

Improper Restriction of Operations within the Bounds of a Memory Buffer in HLOS

Integer Overflow or Wraparound in Radio Interface Layer

Improper Input Validation in WLAN HOST

Buffer Copy without Checking the Size of Input(Classic Buffer Overflow) in Core Platform

Buffer Copy without Checking the Size of Input(Classic Buffer Overflow) in Core Platform

Improper Access control in GPU Subsystem

Buffer Copy Without Checking Size of Input in WLAN HOST

Buffer Copy Without Checking Size of Input in WLAN HOST

Stack-based Buffer Overflow in WLAN HOST

Buffer Over-read in WLAN HOST

Improper Validation of Array Index in WLAN HAL

Improper Validation of Array Index in WLAN HAL

Use After Free in Audio

Use After Free in NPU

Use After Free in DSP Service

Use After Free in Automotive Android OS

Use After Free in Automotive Multimedia

Use After Free in Camera Linux