Out-of-bounds Write in Automotive

Memory Corruption when accessing buffers with invalid length during TA invocation.

Use After Free in Automotive Audio

Memory corruption while handling different IOCTL calls from the user-space simultaneously.

Use After Free in Automotive Audio

Memory Corruption while invoking IOCTL calls when concurrent access to shared buffer occurs.

Use After Free in Automotive Audio

Memory Corruption when concurrent access to shared buffer occurs due to improper synchronization between assignment and deallocation of buffer resources.

Reachable Assertion in Modem

Transient DOS when an LTE RLC packet with invalid TB is received by UE.

Missing Cryptographic Step in Data Modem

Weak configuration may lead to cryptographic issue when a VoWiFi call is triggered from UE.

Use After Free in Automotive Audio

Memory Corruption when concurrent access to shared buffer occurs during IOCTL calls.

Use After Free in Automotive Audio

Memory Corruption when accessing a buffer after it has been freed while processing IOCTL calls.

Buffer Over-read in Graphics

Memory Corruption when adding user-supplied data without checking available buffer space.

Cryptographic Issues in Core

Cryptographic issue while performing RSA PKCS padding decoding.

Improper Release of Memory Before Removing Last Reference in Graphics

Memory Corruption when initiating GPU memory mapping using scatter-gather lists due to unchecked IOMMU mapping errors.

Use After Free in Graphics

Memory Corruption while deallocating graphics processing unit memory buffers due to improper handling of memory pointers.

Buffer Copy Without Checking Size of Input in SPS Applications

Memory Corruption in SPS Application while exporting public key in sorter TA.

Integer Overflow to Buffer Overflow in TZ Secure OS

Memory corruption while loading an ELF segment in TEE Kernel.

Buffer Over-read in WLAN Embedded SW

Transient DOS may occur while processing malformed length field in SSID IEs.

Use of Out-of-range Pointer Offset in Multi-mode Call Processor

Memory Corruption in Multi-mode Call Processor while processing bit mask API.

Out-of-bounds Read in Core

Information disclosure while processing the hash segment in an MBN file.

Out-of-bounds Read in Core

Information disclosure while reading data from an image using specified offset and size parameters.

Reachable Assertion in WLAN Firmware

Transient DOS while processing an ANQP message.

Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables