Memory corruption in Audio when SSR event is triggered after music playback is stopped.
Memory corruption in Trusted Execution Environment while deinitializing an object used for license validation.
Memory corruption when resource manager sends the host kernel a reply message with multiple fragments.
Memory corruption in Audio while calling START command on host voice PCM multiple times for the same RX or TX tap points.
Memory corruption in HLOS while running playready use-case.
Memory corruption in Audio while processing the VOC packet data from ADSP.
Memory corruption in Core when updating rollback version for TA and OTA feature is enabled.
Memory corruption while parsing the ADSP response command.
Memory corruption in Automotive Audio while copying data from ADSP shared buffer to the VOC packet data buffer.
Memory corruption in Audio while processing RT proxy port register driver.
Memory Corruption in Audio while invoking callback function in driver from ADSP.
Buffer overwrite in the WLAN host driver by leveraging a compromised WLAN FW
Memory corruption in WLAN FW while processing command parameters from untrusted WMI payload.
Memory corruption in WLAN handler while processing PhyID in Tx status handler.
Memory corruption in TZ Secure OS while loading an app ELF.
Memory corruption in MPP performance while accessing DSM watermark using external memory address.
Memory corruption in WLAN HAL while processing devIndex from untrusted WMI payload.
Memory corruption in WIN Product while invoking WinAcpi update driver in the UEFI region.
Memory corruption in BT controller while parsing debug commands with specific sub-opcodes at HCI interface level.
Memory corruption in WLAN HAL while parsing WMI command parameters.
Memory corruption in core services when Diag handler receives a command to configure event listeners.
Memory corruption in WLAN Host while setting the PMK length in PMK length in internal cache.
Memory corruption in WLAN HAL while handling command streams through WMI interfaces.
Memory corruption in WLAN HAL while passing command parameters through WMI interfaces.
Memory corruption in Core Services while executing the command for removing a single event listener.
Possible out of bound read or write in VR service due to lack of validation of DSP selection values in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT
Memory corruption while allocating memory in COmxApeDec module in Audio.
Memory corruption in UTILS when modem processes memory specific Diag commands having arbitrary address values as input arguments.
Memory corruption in WLAN HAL while handling command through WMI interfaces.
Memory corruption while processing audio effects.
Possible buffer overflow due to improper size calculation of payload received in VR service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables
Possible stack overflow due to improper length check of TLV while copying the TLV to a local stack variable in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
Possible out of bounds write due to improper validation of number of GPIOs configured in an internal parameters array in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
Memory Corruption in WLAN HOST while parsing QMI WLAN Firmware response message.
Memory Corruption in HLOS while registering for key provisioning notify.
Memory Corruption in WLAN HOST while parsing QMI response message from firmware.
Memory Corruption in Core due to secure memory access by user while loading modem image.
Memory corruption when size of buffer from previous call is used without validation or re-initialization.
Memory Corruption in Audio while playing amrwbplus clips with modified content.
Memory Corruption in VR Service while sending data using Fast Message Queue (FMQ).
Memory Corruption in WLAN HOST while processing WLAN FW request to allocate memory.
Memory Corruption in camera while installing a fd for a particular DMA buffer.
Memory corruption in Audio while processing sva_model_serializer using memory size passed by HIDL client.
Memory Corruption while accessing metadata in Display.
Memory Corruption in GPS HLOS Driver when injectFdclData receives data with invalid data length.
Memory corruption due to untrusted pointer dereference in automotive during system call.
Memory corruption in Linux when the file upload API is called with parameters having large buffer.
Memory corruption in RIL while trying to send apdu packet.
Memory Corruption in Core Platform while printing the response buffer in log.
Memory corruption in WLAN while running doDriverCmd for an unspecific command.