Use After Free in Graphics Linux

Memory corruption when the mapped pages in VBO are still mapped after reclaiming by shrinker.

Cryptographic Issues in BT Controller

Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions.

Buffer over-read in WLAN

Information disclosure due to buffer over-read in WLAN while handling IBSS beacons frame.

Denial of service due to reachable assertion in modem while processing filter rule from application client in Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile

Improper Input Validation in Camera

Memory corruption while taking snapshot when an offset variable is set by camera driver.

Improper Validation of Array Index in Audio

Memory corruption may occur while validating ports and channels in Audio driver.

NULL Pointer Dereference in Display

Memory corruption in display driver while detaching a device.

Use After Free in NPU

Memory corruption while calling the NPU driver APIs concurrently.

Improper Validation of Array Index in WLAN Host Communication

Memory corruption while parsing the ML IE due to invalid frame content.

Out-of-bounds Write in SPS Applications

Memory corruption while reading secure file.

Detection of Error Condition Without Action in Hypervisor

Memory corruption during memory assignment to headless peripheral VM due to incorrect error code handling.

Improper Access Control in Hypervisor

Memory corruption during memory mapping into protected VM address space due to incorrect API restrictions.

Improper Input Validation in Automotive

Memory corruption while triggering commands in the PlayReady Trusted application.

Improper Input Validation in HLOS

Memory corruption during the FRS UDS generation process.

Use After Free in GPS HLOS Driver

Memory corruption while processing a data structure, when an iterator is accessed after it has been removed, potential failures occur.

Out-of-bounds Write in Computer Vision

Memory corruption while reading the FW response from the shared queue.

Out-of-bounds Write in Computer Vision

Memory corruption while reading response from FW, when buffer size is changed by FW while driver is using this size to write null character at the end of buffer.

Improper Access Control in Camera Driver

Memory corruption while processing image encoding, when input buffer length is 0 in IOCTL call.

Improper Access Control in Camera Driver

Memory corruption while processing image encoding, when configuration is NULL in IOCTL parameter.

Buffer Over-read in Display

Memory corruption while processing escape code, when DisplayId is passed with large unsigned value.