Information disclosure when VI calibration state set by ADSP is greater than MAX_FBSP_STATE in the response payload to AFE calibration command.
Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.
Cryptographic issue in Automotive while unwrapping the key secs2d and verifying with RPMB data.
Memory corruption in Audio while processing RT proxy port register driver.
Memory corruption when resource manager sends the host kernel a reply message with multiple fragments.
Memory corruption in Audio when SSR event is triggered after music playback is stopped.
Memory corruption while running NPU, when NETWORK_UNLOAD and (NETWORK_UNLOAD or NETWORK_EXECUTE_V2) commands are submitted at the same time.
Memory corruption in DSP Service during a remote call from HLOS to DSP.
Memory corruption in Automotive Display while destroying the image handle created using connected display driver.
Information disclosure while processing system calls with invalid parameters.
Memory corruption in HLOS while invoking IOCTL calls from user-space.
Memory corruption in Graphics Driver when destroying a context with KGSL_GPU_AUX_COMMAND_TIMELINE objects queued.
Memory corruption in Graphics while processing user packets for command submission.
Memory corruption while loading a VM from a signed VM image that is not coherent in the processor cache.
Memory corruption while processing finish_sign command to pass a rsp buffer.
Memory corruption in Automotive OS whenever untrusted apps try to access HAb for graphics functionalities.
Memory corruption in multimedia due to improper validation of array index in Snapdragon Auto
Memory corruption in android core due to improper validation of array index while returning feature ids after license authentication.
Use after free in graphics fence due to a race condition while closing fence file descriptor and destroy graphics timeline simultaneously in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
Memory corruption in video due to buffer overflow while reading the dts file in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
kernel event may contain unexpected content which is not generated by NPU software in asynchronous execution mode in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Memory corruption as GPU registers beyond the last protected range can be accessed through LPAC submissions.
Memory corruption in audio while playing record due to improper list handling in two threads in Snapdragon Connectivity, Snapdragon Mobile, Snapdragon Wearables
Memory corruption in multimedia due to improper length check while copying the data in Snapdragon Auto
Improper validation of backend id in PCM routing process can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music
Memory corruption in audio module due to integer overflow in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Mobile, Snapdragon Wearables
Memory Corruption in HLOS while registering for key provisioning notify.
Memory Corruption in Core while invoking a call to Access Control core library with hardware protected address range.
Memory Corruption in Core due to secure memory access by user while loading modem image.
Memory Corruption in Audio while allocating the ion buffer during the music playback.
Memory Corruption in Audio while playing amrwbplus clips with modified content.
Memory corruption in Automotive GPU while querying a gsl memory node.
Memory corruption in Graphics while importing a file.
Memory corruption in WIN Product while invoking WinAcpi update driver in the UEFI region.
Information Disclosure in WLAN Host when processing WMI event command.
Information disclosure in WLAN HAL when reception status handler is called.
Memory corruption in HAB Memory management due to broad system privileges via physical address.
Information disclosure in WLAN HAL while handling the WMI state info command.
Information disclosure in WLAN HAL while handling command through WMI interfaces.
Memory corruption in SPS Application while requesting for public key in sorter TA.
Memory corruption while allocating memory in COmxApeDec module in Audio.
Information disclosure in WLAN HOST while processing the WLAN scan descriptor list during roaming scan.
Information disclosure in IOE Firmware while handling WMI command.
Information Disclosure in Qualcomm IPC while reading values from shared memory in VM.
Memory corruption in multimedia due to improper check on received export descriptors in Snapdragon Auto
Memory corruption in multimedia driver due to untrusted pointer dereference while reading data from socket in Snapdragon Auto
Memory corruption in multimedia due to improper check on the messages received. in Snapdragon Auto
Memory corruption in synx driver due to use-after-free condition in the synx driver due to accessing object handles without acquiring lock in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
Memory corruption in Core due to improper configuration in boot remapper.
Memory corruption in Kernel while parsing metadata.