Improper Input Validation in Secure Processor

Memory corruption when the channel ID passed by user is not validated and further used.

Buffer Over-read in WLAN Firmware

Transient DOS while processing TIM IE from beacon frame as there is no check for IE length.

Stack based buffer overflow in Core

Memory corruption due to stack-based buffer overflow in Core

Buffer over-read in Core

Information disclosure due to buffer overread in Core

Buffer overread in Core

Information disclosure due to buffer overread in Core

Stack based buffer overflow in Core

Memory corruption in core due to stack-based buffer overflow

Stack-based buffer overflow in Core

Memory corruption in Core due to stack-based buffer overflow.

Buffer over-read in WLAN

Transient DOS due to buffer over-read in WLAN while processing 802.11 management frames.

Buffer over-read in WLAN

Transient DOS due to buffer over-read in WLAN while parsing WLAN CSA action frames.

Buffer over-read in WLAN

Information disclosure due to buffer over-read in WLAN while parsing BTM action frame.

Stack-based Buffer Overflow in WLAN Windows Host

Memory corruption while invoking IOCTL calls from user space to issue factory test command inside WLAN driver.

Buffer Over-read in MProc

Memory corruption when allocating and accessing an entry in an SMEM partition continuously.

Improper Validation of Array Index in Hypervisor

Memory corruption while Configuring the SMR/S2CR register in Bypass mode.

Buffer copy without checking size of input in WLAN Firmware

Memory corruption due to buffer copy without checking the size of input in WLAN Firmware while processing CCKM IE in reassoc response frame.

Buffer over-read in WLAN Firmware.

Transient DOS in WLAN Firmware due to buffer over-read while processing probe response or beacon.

Buffer copy without checking size of input in modem

Memory corruption in modem due to buffer copy without checking size of input while receiving WMI command.

Buffer over-read in WLAN

Information disclosure due to buffer over-read in WLAN while parsing NMF frame.

Integer overflow to buffer overflow in User Identity Module

Memory corruption in User Identity Module due to integer overflow to buffer overflow when a segement is received via qmi http.

Configuration weakness in modem

Memory corruption due to configuration weakness in modem wile sending command to write protected files.

Buffer overflow in sahara protocol while processing commands leads to overwrite of secure configuration data in Snapdragon Mobile, Snapdragon Compute, Snapdragon Auto, Snapdragon IOT, Snapdragon Connectivity, Snapdragon Voice & Music