Information Disclosure when processing wireless network channel switch information with improperly formatted length fields.
Memory Corruption when processing IOCTL requests with mismatched API versions due to concurrent modification of user-space buffer.
Memory Corruption when processing display command line information due to improper initialization of a variable.
Memory corruption while processing fastboot commands with improperly formatted input.
Memory Corruption when copying data from a freed source while executing performance counter deselect operation.
Memory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the video firmware.
Transient DOS when importing a PKCS#8-encoded RSA private key with a zero-sized modulus.
Memory corruption while retrieving the CBOR data from TA.
Memory corruption while processing video packets received from video firmware.
Transient DOS while processing an ANQP message.
Information disclosure while processing the hash segment in an MBN file.
Information disclosure while reading data from an image using specified offset and size parameters.
Transient DOS while parsing the EPTM test control message to get the test pattern.
Memory corruption while performing private key encryption in trusted application.
Memory corruption while processing a malformed license file during reboot.
Memory corruption during PlayReady APP usecase while processing TA commands.
Memory corruption while using alignments for memory allocation.
Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.
Memory corruption while submitting a large list of sync points in an AUX command to the IOCTLKGSLGPUAUXCOMMAND.
Memory corruption in DSP Services during a remote call from HLOS to DSP.
Possible use after free when process shell memory is freed using IOCTL munmap call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music
Transient DOS when processing target power rate tables during channel configuration.
Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified.
Memory Corruption when concurrent access to shared buffer occurs due to improper synchronization between assignment and deallocation of buffer resources.
Memory Corruption while invoking IOCTL calls when concurrent access to shared buffer occurs.
Memory corruption while handling different IOCTL calls from the user-space simultaneously.
Memory Corruption when concurrent access to shared buffer occurs during IOCTL calls.
Memory corruption in display driver while detaching a device.
Memory corruption may occur while validating ports and channels in Audio driver.
Memory corruption while calling the NPU driver APIs concurrently.