2022

Memory corruption in audio due to use after free while managing buffers from internal cache in Snapdragon Compute, Snapd

memory corruption in video due to buffer overflow while parsing mkv clip with no codechecker in Snapdragon Auto, Snapdra

Memory corruption in video due to double free while parsing 3gp clip with invalid meta data atoms in Snapdragon Auto, Sn

Memory corruption in video due to buffer overflow while reading the dts file in Snapdragon Auto, Snapdragon Compute, Sna

Memory corruption when extracting qcp audio file due to lack of check on data length in Snapdragon Auto, Snapdragon Comp

Denial of service due to memory corruption while extracting ape header from clips in Snapdragon Auto, Snapdragon Compute

Memory corruption due to possible buffer overflow while parsing DSF header with corrupted channel count in Snapdragon Au

Buffer overflow can occur due to improper validation of NDP application information length in Snapdragon Auto, Snapdrago

Possible use after free when process shell memory is freed using IOCTL munmap call and process initialization is in prog

kernel event may contain unexpected content which is not generated by NPU software in asynchronous execution mode in Sna

Out of bound read in WLAN HOST due to improper length check can lead to DOS in Snapdragon Auto, Snapdragon Compute, Snap

Possible buffer over read due to lack of size validation while unpacking frame in Snapdragon Auto, Snapdragon Compute, S

Use after free in graphics fence due to a race condition while closing fence file descriptor and destroy graphics timeli

A vulnerability has been identified in SCALANCE XM408-4C (All versions < V6.5), SCALANCE XM408-4C (L3 int.) (All version

Memory corruption in graphics support layer due to use after free condition in Snapdragon Auto, Snapdragon Consumer IOT,

Memory corruption in BT controller due to improper length check while processing vendor specific commands in Snapdragon

Memory corruption in DSP service due to improper validation of input parameters in Snapdragon Auto, Snapdragon Compute,

Buffer copy in GATT multi notification due to improper length check for the data coming over-the-air in Snapdragon Conne

APK can load a crafted model into the CDSP which can lead to a compromise of CDSP and other APK`s data executing there i

Improper buffer initialization on the backend driver can lead to buffer overflow in Snapdragon Auto

A user with user level permission can access graphics protected region due to improper access control in register config

Improper validation of tag id while RRC sending tag id to MAC can lead to TOCTOU race condition in Snapdragon Connectivi

Possible buffer overflow due to lack of validation for the length of NAI string read from EFS in Snapdragon Auto, Snapdr

Improper handling of writes to virtual GICR control can lead to assertion failure in the hypervisor in Snapdragon Auto,

Possible buffer over read due to improper calculation of string length while parsing Id3 tag in Snapdragon Auto, Snapdra

Improper memory allocation during counter check DLM handling can lead to denial of service in Snapdragon Auto, Snapdrago

Improper serialization of message queue client registration can lead to race condition allowing multiple gunyah message

Improper verification of timeout-based authentication in identity credential can lead to invalid authorization in HLOS i

Possible out of bounds read due to improper typecasting while handling page fault for global memory in Snapdragon Connec

Possible null pointer access due to improper validation of system information message to be processed in Snapdragon Indu

Possible buffer over read due to improper validation of SIB type when processing a NR system Information message in Snap

Possible out of bound read due to improper validation of certificate chain in SSL or Internet key exchange in Snapdragon

Possible memory leak due to improper validation of certificate chain length while parsing server certificate chain in Sn

Possible null pointer dereference due to improper validation of RRC connection reconfiguration message in Snapdragon Aut

Possible assertion due to improper validation of rank restriction field in Snapdragon Auto, Snapdragon Compute, Snapdrag

Possible buffer overflow due to improper validation of array index while processing external DIAG command in Snapdragon

Lack of MBN header size verification against input buffer can lead to memory corruption in Snapdragon Auto, Snapdragon C

Improper access control sequence for AC database after memory allocation can lead to possible memory corruption in Snapd

Improper authorization of a replayed LTE security mode command can lead to a denial of service in Snapdragon Auto, Snapd

Reachable assertion due to improper validation of coreset in PDCCH configuration in SA mode in Snapdragon Auto, Snapdrag

Improper input validation in TrustZone memory transfer interface can lead to information disclosure in Snapdragon Comput

Possible use after free due to lack of null check of DRM file status after file structure is freed in Snapdragon Auto, S

Buffer overflow in sahara protocol while processing commands leads to overwrite of secure configuration data in Snapdrag

Possible unauthorized access to secure space due to improper check of data allowed while flashing the no access control

Access of uninitialized pointer vulnerability exists in the simulator module contained in the graphic editor 'V-SFT' ver

Out-of-bounds write vulnerability exists in V-Server v4.0.11.0 and earlier and V-Server Lite v4.0.13.0 and earlier, whic

Use after free vulnerability exists in the simulator module contained in the graphic editor 'V-SFT' versions prior to v6

Directory traversal vulnerability in T&D Data Server (Japanese Edition) Ver.2.22 and earlier, T&D Data Server (English E

Out-of-bounds read vulnerability exist in the simulator module contained in the graphic editor 'V-SFT' v6.1.3.0 and earl

Incomplete filtering of special elements vulnerability exists in RevoWorks SCVX using 'File Sanitization Library' 1.043