Qualcomm

Improper authentication of un-encrypted plaintext Wi-Fi frames in an encrypted network can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics C…

Memory corruption in Bluetooth HOST due to buffer overflow while parsing the command response received from remote

Memory corruption while handling payloads from remote ESL.

Memory corruption in WLAN due to integer overflow to buffer overflow while parsing GTK frames.

Memory corruption in WLAN due to out of bound array access during connect/roaming in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Sn…

Memory corruption while parsing qcp clip with invalid chunk data size.

Memory corruption in video while parsing the Videoinfo, when the size of atom is greater than the videoinfo size.

Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms.

Memory corruption in video due to configuration weakness.

memory corruption in video due to buffer overflow while parsing asf clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon…

Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions.

Possible buffer overflow due to improper validation of SSID length received from beacon or probe response during an IBSS session in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electr…

Before enqueuing a frame to the PE queue for further processing, an entry in a hash table can be deleted and using a stale version later can lead to use after free condition in Snapdragon Auto, Snapdragon Compute, Snapdr…

Memory corruption in QESL while processing payload from external ESL device to firmware.

Improper validation of program headers containing ELF metadata can lead to image verification bypass in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdrag…

Possible stack out of bound write might happen due to time bitmap length and bit duration fields of the attributes like NAN ranging setup attribute inside a NAN management frame are not Properly validated in Snapdragon A…

Memory corruption in video while parsing invalid mp2 clip.

Memory corruption in Bluetooth HOST while processing the AVRC_PDU_GET_PLAYER_APP_VALUE_TEXT AVRCP response.

Information disclosure due to buffer over-read in WLAN while parsing NMF frame.

Information disclosure due to buffer over-read in WLAN firmware while parsing security context info attributes.

Memory corruption in Core while processing control functions.

Memory corruption in HLOS while running playready use-case.

Memory Corruption in Core due to incorrect type conversion or cast in secure_io_read/write function in TEE.

Memory corruption due to double free in Core while mapping HLOS address to the list.

Memory corruption in Core due to time-of-check time-of-use race condition during dump collection in trust zone.