Cryptographic Issues in BT Controller

Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions.

Denial of service due to reachable assertion in modem while processing filter rule from application client in Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile

Improper Validation of Array Index in Audio

Memory corruption may occur while validating ports and channels in Audio driver.

Use After Free in NPU

Memory corruption while calling the NPU driver APIs concurrently.

Out-of-bounds Write in SPS Applications

Memory corruption while reading secure file.

Detection of Error Condition Without Action in Hypervisor

Memory corruption during memory assignment to headless peripheral VM due to incorrect error code handling.

Improper Access Control in Hypervisor

Memory corruption during memory mapping into protected VM address space due to incorrect API restrictions.

Improper Input Validation in Automotive

Memory corruption while triggering commands in the PlayReady Trusted application.

Improper Input Validation in HLOS

Memory corruption during the FRS UDS generation process.

Use After Free in GPS HLOS Driver

Memory corruption while processing a data structure, when an iterator is accessed after it has been removed, potential failures occur.

Out-of-bounds Write in Computer Vision

Memory corruption while reading the FW response from the shared queue.

Cryptographic Issues in Automotive

Cryptographic issue while processing crypto API calls, missing checks may lead to corrupted key usage or IV reuses.

Double Free in SPS-HLOS

Memory corruption while retrieving the CBOR data from TA.

Buffer Copy Without Checking Size of Input in HLOS

Memory corruption while performing private key encryption in trusted application.

Cryptographic Issues in Core

Cryptographic issue while performing RSA PKCS padding decoding.

Improper Restriction of Operations within the Bounds of a Memory Buffer in Data Network Stack & Connectivity

Memory corruption when the UE receives an RTP packet from the network, during the reassembly of NALUs.

Improper Access Control Applied to Mirrored or Aliased Memory Regions in Hypervisor

memory corruption while loading a PIL authenticated VM, when authenticated VM image is loaded without maintaining cache coherency.

Improper Validation of Array Index in Multi-Mode Call Processor

Memory corruption while selecting the PLMN from SOR failed list.

Incorrect Calculation of Buffer Size in HLOS

Memory corruption during PlayReady APP usecase while processing TA commands.

Out-of-bounds Write in Display

Memory corruption while processing a malformed license file during reboot.