Qualcomm

Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.

Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.

Possible use after free when process shell memory is freed using IOCTL munmap call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapd…

Possible use after free due to improper handling of memory mapping of multiple processes simultaneously.

Memory corruption while using alignments for memory allocation.

Memory corruption in DSP Services during a remote call from HLOS to DSP.

Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon…

Improper handling of address deregistration on failure can lead to new GPU address allocation failure.

Improper authentication of Non-EAPOL/WAPI plaintext frames during four-way handshake can lead to arbitrary network packet injection in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Ele…

Improper authentication of un-encrypted plaintext Wi-Fi frames in an encrypted network can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics C…

Memory corruption in Bluetooth HOST due to buffer overflow while parsing the command response received from remote

Memory corruption when the UE receives an RTP packet from the network, during the reassembly of NALUs.

Memory Corruption in Multi-mode Call Processor while processing bit mask API.

Memory corruption in WLAN due to integer overflow to buffer overflow while parsing GTK frames.

An out of bound memory access can occur due to improper validation of number of frames being passed during music playback in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdrag…

Memory corruption while parsing qcp clip with invalid chunk data size.

Memory corruption in video while parsing the Videoinfo, when the size of atom is greater than the videoinfo size.

Cryptographic issue in Data Modem due to improper authentication during TLS handshake.

Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network.

Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms.

Memory corruption in video due to configuration weakness.

memory corruption in video due to buffer overflow while parsing asf clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon…

Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command.

Possible buffer overflow due to improper parsing of headers while playing the FLAC audio clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdrago…

Possible buffer overflow due to improper validation of SSID length received from beacon or probe response during an IBSS session in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electr…