TI-2023-16287 CVE-2023-33107 · GHSA-wg3g-ggh3-7wgp
Integer Overflow or Wraparound in Graphics Linux
Priority CRITICAL 96KEV
Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.
Qualcomm
Records3060All Threatist records
Exploited (KEV)12In CISA KEV
CVSS critical678CVSS 9.0–10.0
CVSS high1984CVSS 7.0–8.9
Exploited now
Qualcomm records in CISA KEVTI-2026-17287 Qualcomm Multiple Chipsets Memory Corruption Vulnerability TI-2025-15440 Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability TI-2025-15441 Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability TI-2025-19908 Qualcomm Multiple Chipsets Use-After-Free Vulnerability TI-2024-28736 Qualcomm Multiple Chipsets Use-After-Free Vulnerability TI-2022-06419 Qualcomm Multiple Chipsets Use-After-Free Vulnerability
Components
Products in the NVD configurations · select one to filter the recordsRecords
115 records in 315 5g Iot Modem Firmware · all components
TI-2023-16248 CVE-2023-33063 · GHSA-534v-34xw-2g2m
Use After Free in DSP Services
Priority CRITICAL 93KEV
Memory corruption in DSP Services during a remote call from HLOS to DSP.
TI-2025-19905 CVE-2025-27034 · GHSA-h8cv-cjqh-899m
Improper Validation of Array Index in Multi-Mode Call Processor
Priority MEDIUM 49
Memory corruption while selecting the PLMN from SOR failed list.
TI-2023-08648 CVE-2023-22388 · GHSA-pgw3-2gjq-fhgr
Use of Out-of-range Pointer Offset in Multi-mode Call Processor
Priority MEDIUM 49
Memory Corruption in Multi-mode Call Processor while processing bit mask API.
TI-2023-13072 CVE-2023-28540 · GHSA-fmqm-mv4m-4vh3
Improper Authentication in Data Modem
Priority MEDIUM 48
Cryptographic issue in Data Modem due to improper authentication during TLS handshake.
TI-2023-23308 CVE-2023-43551 · GHSA-4h56-hghf-36cj
Improper Authentication in Multi-Mode Call Processor
Priority MEDIUM 47
Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command.
TI-2024-25658 CVE-2024-38408 · GHSA-wqm7-xh9j-c3ff
Cryptographic Issues in BT Controller
Priority MEDIUM 44
Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions.
TI-2023-08645 CVE-2023-22385 · GHSA-4vv2-435c-33ch
Buffer Over-read in Data Modem
Priority MEDIUM 42
Memory Corruption in Data Modem while making a MO call or MT VOLTE call.
TI-2024-15459 CVE-2024-23359 · GHSA-5p64-6fh9-j56j
Buffer Over-read in Multi Mode Call Processor
Priority MEDIUM 41
Information disclosure while decoding Tracking Area Update Accept or Attach Accept message received from network.
TI-2023-16257 CVE-2023-33072 · GHSA-859v-mr3m-wgxq
Buffer copy without checking size of Input in Core
Priority MEDIUM 41
Memory corruption in Core while processing control functions.
TI-2023-16218 CVE-2023-33030 · GHSA-rh7v-fmqc-c7rj
Buffer Copy without Checking Size of Input in HLOS
Priority MEDIUM 41
Memory corruption in HLOS while running playready use-case.
TI-2023-13109 CVE-2023-28578 · GHSA-9fv2-j4fg-6v4w
Improper Input Validation in Services
Priority MEDIUM 41
Memory corruption in Core Services while executing the command for removing a single event listener.
TI-2022-19223 CVE-2022-40507 · GHSA-wcg5-6pc8-hjf5
Double free in Core
Priority MEDIUM 41
Memory corruption due to double free in Core while mapping HLOS address to the list.
TI-2025-15394 CVE-2025-21430 · GHSA-c8ww-p8qh-gjr8
Buffer Over-read in WLAN Host
Priority MEDIUM 40
Transient DOS while connecting STA to AP and initiating ADD TS request from AP to establish TSpec session.
TI-2025-19936 CVE-2025-27066 · GHSA-hgjc-f253-c7xh
Reachable Assertion in WLAN Firmware
Priority LOW 39
Transient DOS while processing an ANQP message.
TI-2024-21879 CVE-2024-33014 · GHSA-v2v8-fj72-c4fm
Buffer Over-read in WLAN Host
Priority LOW 39
Transient DOS while parsing ESP IE from beacon/probe response frame.
TI-2024-15453 CVE-2024-23353 · GHSA-6cvr-wmr3-636f
Buffer Over-read in Multi Mode Call Processor
Priority LOW 39
Transient DOS while decoding attach reject message received by UE, when IEI is set to ESM_IEI.
TI-2024-15452 CVE-2024-23352 · GHSA-2wc7-jrqh-277g
Loop with Unreachable Exit Condition (`Infinite Loop`) in Multi Mode Call Processor
Priority LOW 39
Transient DOS when NAS receives ODAC criteria of length 1 and type 1 in registration accept OTA.
TI-2023-23290 CVE-2023-43533 · GHSA-3xhr-vwcx-8p3c
Buffer Over-read in WLAN Firmware
Priority LOW 39
Transient DOS in WLAN Firmware when the length of received beacon is less than length of ieee802.11 beacon frame.
TI-2023-23286 CVE-2023-43529 · GHSA-8qc5-fvr8-g263
Reachable Assertion in Data Modem
Priority LOW 39
Transient DOS while processing IKEv2 Informational request messages, when a malformed fragment packet is received.
TI-2023-16284 CVE-2023-33104 · GHSA-p9qx-8g2v-c964
Improper input Validation in Multi-Mode Call Processor
Priority LOW 39
Transient DOS while processing PDU Release command with a parameter PDU ID out of range.
TI-2023-16280 CVE-2023-33099 · GHSA-gjg5-hhr2-54wh
Improper Input Validation in Multi-Mode Call Processor
Priority LOW 39
Transient DOS while processing SMS container of non-standard size received in DL NAS transport in NR.
TI-2023-16277 CVE-2023-33096 · GHSA-3w2j-mvmp-4vx3
Reachable Assertion in Multi-Mode Call Processor
Priority LOW 39
Transient DOS while processing DL NAS Transport message, as specified in 3GPP 24.501 v16.
TI-2023-16276 CVE-2023-33095 · GHSA-fvc8-q78j-c743
Reachable Assertion in Multi-Mode Call Processor
Priority LOW 39
Transient DOS while processing multiple payload container type with incorrect container length received in DL NAS transport OTA in NR.
TI-2023-16269 CVE-2023-33086 · GHSA-prf2-664f-fphr
Improper Release of Memory Before Removing Last Reference in Data Modem
Priority LOW 39
Transient DOS while processing multiple IKEV2 Informational Request to device from IPSEC server with different identifiers.