Memory corruption while copying packets received from unix clients.
memory corruption while processing an image encoding completion event.
Memory corruption while copying the sound model data from user to kernel buffer during sound model register.
Memory corruption while processing the IOCTL FM HCI WRITE request.
Memory corruption when the bandpass filter order received from AHAL is not within the expected range.
Memory corruption while querying module parameters from Listen Sound model client in kernel from user space.
Kernel memory error in debug module due to improper check of user data length before copying into memory in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in APQ8096AU, APQ8098, MSM8996AU, QCN7605, SDM439, SDX24, SM8150
Buffer overflow can occur in wlan module if supported rates or extended rates element length is greater than max rate set length in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in APQ8017, APQ8053, APQ8096AU, MDM9206, MDM9207C, MDM9607, MDM9650, MSM8905, MSM8996AU, Nicobar, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCN7605, QCS405, QCS605, SDA845, SDM670, SDM710, SDM845, SDX20, SM6150, SM8150, SM8250, SXR2130
Memory corruption in Automotive Audio while copying data from ADSP shared buffer to the VOC packet data buffer.
Memory corruption in Audio while processing the calibration data returned from ACDB loader.
Memory corruption in Core while processing control functions.
Memory corruption in HLOS while running playready use-case.
Memory corruption when resource manager sends the host kernel a reply message with multiple fragments.
Memory Corruption in Audio while invoking callback function in driver from ADSP.
Memory corruption while sending SMS from AP firmware.
Memory corruption while invoking callback function of AFE from ADSP.
Memory corruption while processing pin reply in Bluetooth, when pin code received from APP layer is greater than expected size.
Memory corruption in wearables while processing data from AON.
Memory corruption while processing finish_sign command to pass a rsp buffer.
Memory corruption in Audio while processing IIR config data from AFE calibration block.
Memory corruption in HLOS while converting from authorization token to HIDL vector.
Memory corruption in Boot while running a ListVars test in UEFI Menu during boot.
Memory corruption in Core while processing RX intent request.
Memory corruption while processing message content in eAVB.
Memory corruption while copying the result to the transmission queue which is shared between the virtual machine and the host.
Memory corruption while performing private key encryption in trusted application.
Memory corruption when passing parameters to the Trusted Virtual Machine during the handshake.
Memory corruption in WLAN HAL while processing devIndex from untrusted WMI payload.
Memory corruption in WLAN FW while processing command parameters from untrusted WMI payload.
Memory corruption in SPS Application while requesting for public key in sorter TA.
Memory corruption in WLAN Host while setting the PMK length in PMK length in internal cache.
Memory corruption in WLAN while sending transmit command from HLOS to UTF handlers.
Memory Corruption in WLAN Host while deserializing the input PMK bytes without checking the input PMK length.
Memory Corruption in SPS Application while exporting public key in sorter TA.
Memory corruption in WLAN Host when the firmware invokes multiple WMI Service Available command.
Memory corruption while processing audio effects.
Memory Corruption in WLAN HOST while parsing QMI response message from firmware.
Memory Corruption in WLAN HOST while processing WLAN FW request to allocate memory.
Memory Corruption in Data Network Stack & Connectivity when sim gets detected on telephony.
Memory corruption in Audio while processing sva_model_serializer using memory size passed by HIDL client.
Memory corruption in WLAN while running doDriverCmd for an unspecific command.
Memory Corruption in Core Platform while printing the response buffer in log.
Memory corruption in Core Platform while printing the response buffer in log.
Memory corruption in Linux when the file upload API is called with parameters having large buffer.
Memory corruption while processing an IOCTL call to set mixer controls.
Memory corruption while processing IOCTL call invoked from user-space to verify non extension FIPS encryption and decryption functionality.
Memory corruption when IOCTL call is invoked from user-space to read board data.
Memory corruption when Alternative Frequency offset value is set to 255.
Memory corruption when user provides data for FM HCI command control operations.
Memory corruption during the handshake between the Primary Virtual Machine and Trusted Virtual Machine.