TI-2023-08648 CVE-2023-22388 · GHSA-pgw3-2gjq-fhgr
Use of Out-of-range Pointer Offset in Multi-mode Call Processor
Priority MEDIUM 49
Memory Corruption in Multi-mode Call Processor while processing bit mask API.
Qualcomm
Records3060All Threatist records
Exploited (KEV)12In CISA KEV
CVSS critical678CVSS 9.0–10.0
CVSS high1984CVSS 7.0–8.9
Exploited now
Qualcomm records in CISA KEVTI-2026-17287 Qualcomm Multiple Chipsets Memory Corruption Vulnerability TI-2025-15440 Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability TI-2025-15441 Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability TI-2025-19908 Qualcomm Multiple Chipsets Use-After-Free Vulnerability TI-2024-28736 Qualcomm Multiple Chipsets Use-After-Free Vulnerability TI-2022-06419 Qualcomm Multiple Chipsets Use-After-Free Vulnerability
Components
Products in the NVD configurations · select one to filter the recordsRecords
47 records in 9205 Lte Modem Firmware · all components
TI-2023-23308 CVE-2023-43551 · GHSA-4h56-hghf-36cj
Improper Authentication in Multi-Mode Call Processor
Priority MEDIUM 47
Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command.
TI-2023-08645 CVE-2023-22385 · GHSA-4vv2-435c-33ch
Buffer Over-read in Data Modem
Priority MEDIUM 42
Memory Corruption in Data Modem while making a MO call or MT VOLTE call.
TI-2022-19222 CVE-2022-40505 · GHSA-4p3h-qrpg-h7hr
Buffer over-read in Modem
Priority MEDIUM 42
Information disclosure due to buffer over-read in Modem while parsing DNS hostname.
TI-2022-14713 CVE-2022-33291 · GHSA-fh2p-qw35-q7r4
Buffer over-read in Modem
Priority MEDIUM 42
Information disclosure in Modem due to buffer over-read while receiving a IP header with malformed length.
TI-2022-14709 CVE-2022-33287 · GHSA-vccr-c5vf-xh9r
Buffer over-read in Modem
Priority MEDIUM 42
Information disclosure in Modem due to buffer over-read while getting length of Unfragmented headers in an IPv6 packet.
TI-2024-15459 CVE-2024-23359 · GHSA-5p64-6fh9-j56j
Buffer Over-read in Multi Mode Call Processor
Priority MEDIUM 41
Information disclosure while decoding Tracking Area Update Accept or Attach Accept message received from network.
TI-2023-16257 CVE-2023-33072 · GHSA-859v-mr3m-wgxq
Buffer copy without checking size of Input in Core
Priority MEDIUM 41
Memory corruption in Core while processing control functions.
TI-2023-16218 CVE-2023-33030 · GHSA-rh7v-fmqc-c7rj
Buffer Copy without Checking Size of Input in HLOS
Priority MEDIUM 41
Memory corruption in HLOS while running playready use-case.
TI-2022-19223 CVE-2022-40507 · GHSA-wcg5-6pc8-hjf5
Double free in Core
Priority MEDIUM 41
Memory corruption due to double free in Core while mapping HLOS address to the list.
TI-2024-15453 CVE-2024-23353 · GHSA-6cvr-wmr3-636f
Buffer Over-read in Multi Mode Call Processor
Priority LOW 39
Transient DOS while decoding attach reject message received by UE, when IEI is set to ESM_IEI.
TI-2023-16220 CVE-2023-33032 · GHSA-q9h6-c2ff-prcp
Integer Overflow or Wraparound in TZ Secure OS
Priority LOW 39
Memory corruption in TZ Secure OS while requesting a memory allocation from TA region.
TI-2023-13116 CVE-2023-28585 · GHSA-x56w-m67j-6hmr
Integer Overflow to Buffer Overflow in TZ Secure OS
Priority LOW 39
Memory corruption while loading an ELF segment in TEE Kernel.
TI-2022-14725 CVE-2022-33304 · GHSA-8wvv-chwp-prvw
NULL pointers dereference in Modem
Priority LOW 39
Transient DOS due to NULL pointer dereference in Modem while performing pullup for received TCP/UDP packet.
TI-2024-21919 CVE-2024-33056 · GHSA-w66q-chx8-5439
Buffer Over-read in MProc
Priority LOW 37
Memory corruption when allocating and accessing an entry in an SMEM partition continuously.
TI-2024-14220 CVE-2024-21461 · GHSA-56fc-m9wv-h689
Double Free in HLOS
Priority LOW 37
Memory corruption while performing finish HMAC operation when context is freed by keymaster.
TI-2023-16251 CVE-2023-33066 · GHSA-xcr6-9x44-6hpq
Use of Out-of-range Pointer Offset in Audio
Priority LOW 37
Memory corruption in Audio while processing RT proxy port register driver.
TI-2023-16221 CVE-2023-33033 · GHSA-wxqg-47fv-wf96
Use of Out-of-range Pointer Offset in Audio
Priority LOW 37
Memory corruption in Audio during playback with speaker protection.
TI-2025-19924 CVE-2025-27054 · GHSA-hwcw-37m9-g3f9
Out-of-bounds Write in Display
Priority LOW 35
Memory corruption while processing a malformed license file during reboot.
TI-2025-19923 CVE-2025-27053 · GHSA-jgwx-g3h6-cg8j
Incorrect Calculation of Buffer Size in HLOS
Priority LOW 35
Memory corruption during PlayReady APP usecase while processing TA commands.
TI-2024-14228 CVE-2024-21469 · GHSA-4c2p-rjhv-wr5f
Permissions, Privileges, and Access Control issues in TZ Secure OS
Priority LOW 35
Memory corruption when an invoke call and a TEE call are bound for the same trusted application.
TI-2024-14224 CVE-2024-21465 · GHSA-r8hj-xhqp-g2f3
Buffer Over-read in Trusted Execution Environment
Priority LOW 35
Memory corruption while processing key blob passed by the user.
TI-2023-23299 CVE-2023-43542 · GHSA-p555-252p-vf5r
Buffer Copy Without Checking Size of Input in Trusted Execution Environment
Priority LOW 35
Memory corruption while copying a keyblob`s material when the key material`s size is not accurately checked.
TI-2023-16206 CVE-2023-33018 · GHSA-rw95-68xg-rf7m
Integer Overflow to Buffer Overflow in User Identity Module
Priority LOW 35
Memory corruption while using the UIM diag command to get the operators name.
TI-2023-13078 CVE-2023-28546 · GHSA-8cqv-gpw9-fq7h
Buffer Copy Without Checking Size of Input in SPS Applications
Priority LOW 35
Memory Corruption in SPS Application while exporting public key in sorter TA.