Possible memory corruption in kernel while performing memory access due to hypervisor not correctly invalidated the processor translation caches in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

Stack based buffer overflow in Core

Memory corruption due to stack-based buffer overflow in Core

Integer Overflow to Buffer Overflow in Automotive

Memory corruption in Automotive due to integer overflow to buffer overflow while registering a new listener with shared buffer.

Improper Input Validation in Automotive

Memory corruption in Automotive due to improper input validation.

Buffer Copy Without Checking Size of Input in Kernel

Memory corruption in kernel due to missing checks when updating the access rights of a memextent mapping.

Buffer over-read in Core

Information disclosure due to buffer overread in Core

Buffer overread in Core

Information disclosure due to buffer overread in Core

Stack based buffer overflow in Core

Memory corruption in core due to stack-based buffer overflow

Stack-based buffer overflow in Core

Memory corruption in Core due to stack-based buffer overflow.

Use of Out-of-range Pointer Offset in Automotive Audio

Memory corruption during voice activation, when sound model parameters are loaded from HLOS to ADSP.

Use After Free in Audio

Memory corruption during voice activation, when sound model parameters are loaded from HLOS, and the received sound model list is empty in HLOS drive.

Buffer Over-read in Automotive OS Platform

Transient DOS can occur when GVM sends a specific message type to the Vdev-FastRPC backend.

Integer Overflow to Buffer Overflow in Automotive OS Platform

Memory corruption can occur if an already verified IFS2 image is overwritten, bypassing boot verification. This allows unauthorized programs to be injected into security-sensitive images, enabling the booting of a tampered IFS2 system image.

Permissions, Privileges, and Access Controls issue in Automotive OS Platform

Uncontrolled resource consumption when a driver, an application or a SMMU client tries to access the global registers through SMMU.

Buffer Copy without Checking the Size of Input(Classic Buffer Overflow) in Core Platform

Memory corruption in Core Platform while printing the response buffer in log.

Buffer Copy without Checking the Size of Input(Classic Buffer Overflow) in Core Platform

Memory Corruption in Core Platform while printing the response buffer in log.

Improper Input Validation in Automotive

Weak configuration in Automotive while VM is processing a listener request from TEE.

Improper Input Validation in HLOS

Memory Corruption in HLOS while registering for key provisioning notify.

Use After Free in Automotive Display

Memory corruption in Automotive Display while destroying the image handle created using connected display driver.

Integer overflow to buffer overflow in Automotive Multimedia

Memory corruption in Automotive Multimedia due to integer overflow to buffer overflow during IOCTL calls in video playback.