Memory corruption while processing input message passed from FE driver.
Memory corruption may occur during communication between primary and guest VM.
Memory corruption while Invoking IOCTL calls from user-space to validate FIPS encryption or decryption functionality.
Memory corruption can occur when TME processes addresses from TZ and MPSS requests without proper validation.
Memory corruption while sound model registration for voice activation with audio kernel driver.
Memory corruption while handling schedule request in Camera Request Manager(CRM) due to invalid link count in the corresponding session.
Memory corruption can occur if an already verified IFS2 image is overwritten, bypassing boot verification. This allows unauthorized programs to be injected into security-sensitive images, enabling the booting of a tampered IFS2 system image.
Memory corruption may occour while generating test pattern due to negative indexing of display ID.
Memory corruption in SPS Application while requesting for public key in sorter TA.
Memory corruption in WLAN Host while setting the PMK length in PMK length in internal cache.
Memory corruption in TZ Secure OS while loading an app ELF.
Memory corruption in core services when Diag handler receives a command to configure event listeners.
Memory corruption in WLAN handler while processing PhyID in Tx status handler.
Memory corruption in MPP performance while accessing DSM watermark using external memory address.
Memory corruption in WLAN FW while processing command parameters from untrusted WMI payload.
Memory corruption in WIN Product while invoking WinAcpi update driver in the UEFI region.
Memory corruption in WLAN HAL while passing command parameters through WMI interfaces.
Memory corruption in UTILS when modem processes memory specific Diag commands having arbitrary address values as input arguments.
Memory corruption in Core Services while executing the command for removing a single event listener.
Memory corruption while processing audio effects.
The cam_get_device_priv function does not check the type of handle being returned (device/session/link). This would lead to invalid type usage if a wrong handle is passed to it.
Possible memory corruption in perfservice due to improper validation array length taken from user application. in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in APQ8096AU, APQ8098, Kamorta, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8998, Nicobar, QCM2150, QCS605, QM215, Rennell, Saipan, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130
Memory corruption when invalid input is passed to invoke GPU Headroom API call.
Memory corruption in i2c buses due to improper input validation while reading address configuration from i2c driver in Snapdragon Mobile, Snapdragon Wearables
Memory Corruption in HLOS while registering for key provisioning notify.
Memory Corruption in WLAN HOST while parsing QMI response message from firmware.
Improper validation of backend id in PCM routing process can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music
Memory corruption in Core due to improper configuration in boot remapper.
Memory corruption in WLAN while running doDriverCmd for an unspecific command.
Memory corruption in Audio during playback session with audio effects enabled.
Memory Corruption in VR Service while sending data using Fast Message Queue (FMQ).
Memory Corruption in Radio Interface Layer while sending an SMS or writing an SMS to SIM.
Memory corruption in RIL while trying to send apdu packet.
Memory Corruption in Linux while processing QcRilRequestImsRegisterMultiIdentityMessage request.
Memory Corruption while accessing metadata in Display.
Memory corruption due to untrusted pointer dereference in automotive during system call.
Memory corruption in Linux while calling system configuration APIs.
Memory Corruption in Core Platform while printing the response buffer in log.
Memory Corruption in Data Network Stack & Connectivity when sim gets detected on telephony.
Memory corruption in Audio while processing sva_model_serializer using memory size passed by HIDL client.
Memory corruption when malformed message payload is received from firmware.
Memory Corruption in WLAN HOST while processing WLAN FW request to allocate memory.
Memory corruption while processing the IOCTL FM HCI WRITE request.
Memory Corruption in camera while installing a fd for a particular DMA buffer.
Memory corruption in Linux when the file upload API is called with parameters having large buffer.
Memory Corruption in GPS HLOS Driver when injectFdclData receives data with invalid data length.
Memory corruption in Automotive GPU while querying a gsl memory node.
Memory corruption in WLAN HAL while processing WMI-UTF command or FTM TLV1 command.
Memory corruption in Automotive Multimedia due to improper access control in HAB.
Memory corruption in SPI buses due to improper input validation while reading address configuration from spi buses in Snapdragon Mobile, Snapdragon Wearables