Memory corruption while invoking IOCTL calls from userspace to camera kernel driver to dump request information.
Memory corruption can occur when TME processes addresses from TZ and MPSS requests without proper validation.
Memory Corruption in Audio while invoking IOCTLs calls from the user-space.
Memory corruption may occour occur when stopping the WLAN interface after processing a WMI command from the interface.
Memory corruption may occour while generating test pattern due to negative indexing of display ID.
Memory corruption during concurrent buffer access due to modification of the reference count.
Memory corruption while processing a private escape command in an event trigger.
Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver.
Memory corruption while processing an IOCTL request, when buffer significantly exceeds the command argument limit.
Memory corruption while copying the result to the transmission queue in EMAC.
Memory corruption during dynamic process creation call when client is only passing address and length of shell binary.
Memory corruption while processing a data structure, when an iterator is accessed after it has been removed, potential failures occur.
Memory corruption may occur due top improper access control in HAB process.
Memory corruption when programming registers through virtual CDM.
Memory corruption may occur while reading board data via IOCTL call when the WLAN driver copies the content to the provided output buffer.
Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver.
Memory Corruption in Graphics while accessing a buffer allocated through the graphics pool.
Memory Corruption in camera while installing a fd for a particular DMA buffer.
Memory corruption in WLAN HAL while processing WMI-UTF command or FTM TLV1 command.
Memory Corruption in Core during syscall for Sectools Fuse comparison feature.
Memory corruption in RIL while trying to send apdu packet.
Memory corruption in Audio while processing sva_model_serializer using memory size passed by HIDL client.
Improper Access to the VM resource manager can lead to Memory Corruption.
Memory Corruption in Linux while processing QcRilRequestImsRegisterMultiIdentityMessage request.
Memory Corruption in Data Network Stack & Connectivity when sim gets detected on telephony.
Memory Corruption due to improper validation of array index in Linux while updating adn record.
Memory corruption in Audio during playback session with audio effects enabled.
Memory Corruption while accessing metadata in Display.
Memory corruption during voice activation, when sound model parameters are loaded from HLOS, and the received sound model list is empty in HLOS drive.
Memory Corruption in GPS HLOS Driver when injectFdclData receives data with invalid data length.
Memory corruption while invoking IOCTL calls from user space to issue factory test command inside WLAN driver.
Memory corruption while processing API calls to NPU with invalid input.
An app with non-privileged access can change global system brightness and cause undesired system behavior.
Memoru corruption in Audio when ADSP sends input during record use case.
Memory corruption while handling file descriptor during listener registration/de-registration.
Memory corruption occurs during the copying of read data from the EEPROM because the IO configuration is exposed as shared memory.
Memory corruption while processing command in Glink linux.
Memory corruption in Video while calling APIs with different instance ID than the one received in initialization.
Memory corruption when invalid input is passed to invoke GPU Headroom API call.
Memory corruption in Trusted Execution Environment while calling service API with invalid address.
Memory corruption in HAB Memory management due to broad system privileges via physical address.
Memory Corruption in Core Platform while printing the response buffer in log.
Memory corruption while processing camera use case IOCTL call.
Memory corruption while maintaining memory maps of HLOS memory.
Memory corruption while invoking IOCTL calls from user space to read WLAN target diagnostic information.
Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node.
Use after free issue occurs If another instance of open for voice_svc node has been called from application without closing the previous one. in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24
Out-of-bounds access can occur in camera driver due to improper validation of array index in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, QCN7605, SDA660, SDM450, SDM630, SDM636, SDM660, SDX20
Lack of input validation for data received from user space can lead to OOB access in WLAN in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, SD 210/SD 212/SD 205, SD 425, SD 430, SD 600, SD 615/16/SD 415, SD 625, SD 632, SD 650/52, SD 820A, SDX20
Lack of check of extscan change results received from firmware can lead to an out of buffer read in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCS605, SD 210/SD 212/SD 205, SD 425, SD 430, SD 600, SD 625, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM630, SDM660, SDX20, SDX24