Possible heap overflow due to improper length check of domain while parsing the DNS response in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables
Information disclosure while decoding Tracking Area Update Accept or Attach Accept message received from network.
Memory corruption while redirecting log file to any file location with any file name.
Improper buffer size validation of DSM packet received can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables
Memory corruption when AP includes TID to link mapping IE in the beacons and STA is parsing the beacon TID to link mapping IE.
Information disclosure in Video while parsing mp2 clip with invalid section length.
While processing server certificate from IPSec server, certificate validation for subject alternative name API can cause heap overflow which can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile
Out of bound access in WLAN driver due to lack of validation of array length before copying into array in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
Possible buffer underflow due to lack of check for negative indices values when processing user provided input in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables
Information disclosure while decoding this RTP packet Payload when UE receives the RTP packet from the network.
Information disclosure due to buffer over-read in Bluetooth Host while A2DP streaming.
Memory corruption in WLAN Firmware while doing a memory copy of pmk cache.
Information disclosure sue to buffer over-read in modem while processing ipv6 packet with hop-by-hop or destination option in header.
Memory corruption in video due to configuration weakness. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
Information disclosure due to buffer over-read in WLAN while parsing BTM action frame.
Memory corruption due to information exposure in Powerline Communication Firmware while sending different MMEs from a single, unassociated device.
Information disclosure due to buffer over-read in Modem while using static array to process IPv4 packets.
Memory corruption due to stack based buffer overflow in WLAN having invalid WNM frame length.
Information disclosure due to buffer over-read in WLAN while parsing NMF frame.
Information disclosure due to buffer over-read in modem while reading configuration parameters.
Information disclosure due to buffer over-read in WLAN while WLAN frame parsing due to missing frame length check.
Information disclosure in Modem due to buffer over-read while getting length of Unfragmented headers in an IPv6 packet.
Information disclosure in Modem due to buffer over-read while parsing the wms message received given the buffer and its length.
Information disclosure in Modem due to buffer over-read while receiving a IP header with malformed length.
Information disclosure due to buffer over-read in Bluetooth HOST while processing GetFolderItems and GetItemAttribute Cmds from peer device.
Information disclosure may occur while processing goodbye RTCP packet from network.
Information disclosure while parsing the OCI IE with invalid length.
Memory corruption during management frame processing due to mismatch in T2LM info element.
Information disclosure may occur during a video call if a device resets due to a non-conforming RTCP packet that doesn`t adhere to RFC standards.
Memory corruption in QESL while processing payload from external ESL device to firmware.
Memory corruption while handling payloads from remote ESL.
Memory corruption in WLAN Firmware while parsing receieved GTK Keys in GTK KDE.
Memory corruption in Data Modem while verifying hello-verify message during the DTLS handshake.
Out of bound write while QoS DSCP mapping due to improper input validation for data received from association response frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9150, MDM9206, MDM9207C, MDM9607, MDM9650, MSM8905, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, Nicobar, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCM2150, QCN7605, QCS405, QCS605, QM215, SA6155P, Saipan, SC8180X, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM845, SDX20, SDX55, SM8150, SM8250, SXR2130
Information disclosure in modem due to improper check of IP type while processing DNS server query
Information disclosure in modem due to buffer over-read while processing response from DNS server
Information disclosure in modem due to buffer over-red while performing checksum of packet received
An issue was discovered on Samsung mobile devices with P(9.0) (SM6150, SM8150, SM8150_FUSION, exynos7885, exynos9610, and exynos9820 chipsets) software. RKP memory corruption allows attackers to control the effective address in EL2. The Samsung ID is SVE-2019-15221 (October 2019).
Information disclosure in modem due to buffer over read in dns client due to missing length check
Information Disclosure in data Modem while parsing an FMTP line in an SDP message.
Memory corruption in Modem while processing security related configuration before AS Security Exchange.
Memory corruption in Bluetooth HOST due to stack-based buffer overflow when when extracting data using command length parameter in Snapdragon Connectivity, Snapdragon Mobile
Information disclosure in Network Services due to buffer over-read while the device receives DNS response.
Memory Corruption in Multi-mode Call Processor while processing bit mask API.
Memory corruption while parsing qcp clip with invalid chunk data size.
Memory corruption in video while parsing invalid mp2 clip.
Memory corruption in modem due to buffer overwrite while building an IPv6 multicast address based on the MAC address of the iface
Memory corruption in modem due to improper length check while copying into memory
Information disclosure in modem due to improper input validation during parsing of upcoming CoAP message
Information disclosure in modem data due to array out of bound access while handling the incoming DNS response packet