Buffer Over-read in Audio

Transient DOS in Audio while remapping channel buffer in media codec decoding.

Buffer Over-read in WLAN Firmware

Transient DOS while parsing WLAN beacon or probe-response frame.

Buffer Over-read in WLAN Firmware

Transient DOS in WLAN Firmware while processing frames with missing header fields.

Buffer Over-Read in WLAN Firmware

Transient DOS in WLAN Firmware while processing the received beacon or probe response frame.

Improper Input Validation in WLAN HOST

Memory corruption in WLAN HOST while receiving an WMI event from firmware.

Integer Overflow in Multimedia Framework

Memory Corruption in Multimedia Framework due to integer overflow when synx bind is called along with synx signal.

Improper authentication in Modem

Transient DOS due to improper authentication in modem while receiving plain TLB OTA request message from network.

Untrusted Pointer Dereference in Core

Transient DOS due to untrusted Pointer Dereference in core while sending USB QMI request.

Improper access control in Kernel

Memory corruption due to improper access control in kernel while processing a mapping request from root process.

Improper authorization in Modem

Transient DOS due to improper authorization in Modem

Reachable assertion in Modem

Transient DOS due to reachable assertion in Modem while processing config related to cross carrier scheduling, which is not supported.

Reachable assertion in Modem

Transient DOS due to reachable assertion in Modem when UE received Downlink Data Indication message from the network.

Reachable assertion in Modem

Transient DOS due to reachable assertion in Modem during OSI decode scheduling.

Null pointer dereference in Modem

Transient DOS due to NULL pointer dereference in Modem while sending invalid messages in DCCH.

Stack-based buffer overflow in Modem

Memory corruption in modem due to stack based buffer overflow while parsing OTASP Key Generation Request Message.

Reachable assertion in Modem

Transient DOS due to reachable assertion in Modem because of invalid network configuration.

Double free in Core

Memory corruption due to double free in core while initializing the encryption key.

Information disclosure in Bluetooth driver due to buffer over-read while reading l2cap length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Memory corruption in display due to time-of-check time-of-use race condition during map or unmap in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Memory corruption in graphics due to use-after-free while graphics profiling in Snapdragon Connectivity, Snapdragon Mobile