TI-2023-08648 CVE-2023-22388 · GHSA-pgw3-2gjq-fhgr
Use of Out-of-range Pointer Offset in Multi-mode Call Processor
Priority MEDIUM 49
Memory Corruption in Multi-mode Call Processor while processing bit mask API.
Qualcomm
Records3060All Threatist records
Exploited (KEV)12In CISA KEV
CVSS critical678CVSS 9.0–10.0
CVSS high1984CVSS 7.0–8.9
Exploited now
Qualcomm records in CISA KEVTI-2026-17287 Qualcomm Multiple Chipsets Memory Corruption Vulnerability TI-2025-15440 Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability TI-2025-15441 Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability TI-2025-19908 Qualcomm Multiple Chipsets Use-After-Free Vulnerability TI-2024-28736 Qualcomm Multiple Chipsets Use-After-Free Vulnerability TI-2022-06419 Qualcomm Multiple Chipsets Use-After-Free Vulnerability
Components
Products in the NVD configurations · select one to filter the recordsRecords
46 records in 9206 Lte Modem Firmware · all components
TI-2023-23308 CVE-2023-43551 · GHSA-4h56-hghf-36cj
Improper Authentication in Multi-Mode Call Processor
Priority MEDIUM 47
Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command.
TI-2023-08645 CVE-2023-22385 · GHSA-4vv2-435c-33ch
Buffer Over-read in Data Modem
Priority MEDIUM 42
Memory Corruption in Data Modem while making a MO call or MT VOLTE call.
TI-2022-19222 CVE-2022-40505 · GHSA-4p3h-qrpg-h7hr
Buffer over-read in Modem
Priority MEDIUM 42
Information disclosure due to buffer over-read in Modem while parsing DNS hostname.
TI-2022-14713 CVE-2022-33291 · GHSA-fh2p-qw35-q7r4
Buffer over-read in Modem
Priority MEDIUM 42
Information disclosure in Modem due to buffer over-read while receiving a IP header with malformed length.
TI-2022-14709 CVE-2022-33287 · GHSA-vccr-c5vf-xh9r
Buffer over-read in Modem
Priority MEDIUM 42
Information disclosure in Modem due to buffer over-read while getting length of Unfragmented headers in an IPv6 packet.
TI-2024-15459 CVE-2024-23359 · GHSA-5p64-6fh9-j56j
Buffer Over-read in Multi Mode Call Processor
Priority MEDIUM 41
Information disclosure while decoding Tracking Area Update Accept or Attach Accept message received from network.
TI-2023-16218 CVE-2023-33030 · GHSA-rh7v-fmqc-c7rj
Buffer Copy without Checking Size of Input in HLOS
Priority MEDIUM 41
Memory corruption in HLOS while running playready use-case.
TI-2022-19223 CVE-2022-40507 · GHSA-wcg5-6pc8-hjf5
Double free in Core
Priority MEDIUM 41
Memory corruption due to double free in Core while mapping HLOS address to the list.
TI-2025-15393 CVE-2025-21429 · GHSA-mrr6-w84f-5xh8
Buffer Over-read in WLAN Host
Priority MEDIUM 40
Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request.
TI-2025-15392 CVE-2025-21428 · GHSA-4rmv-m7cx-wvg4
Buffer Over-read in WLAN Host
Priority MEDIUM 40
Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request from the AP to establish a TSpec session.
TI-2024-15453 CVE-2024-23353 · GHSA-6cvr-wmr3-636f
Buffer Over-read in Multi Mode Call Processor
Priority LOW 39
Transient DOS while decoding attach reject message received by UE, when IEI is set to ESM_IEI.
TI-2023-16263 CVE-2023-33080 · GHSA-rh2q-252v-ccqc
Buffer over-read in WLAN Firmware
Priority LOW 39
Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management frame.
TI-2022-14725 CVE-2022-33304 · GHSA-8wvv-chwp-prvw
NULL pointers dereference in Modem
Priority LOW 39
Transient DOS due to NULL pointer dereference in Modem while performing pullup for received TCP/UDP packet.
TI-2025-15417 CVE-2025-21454 · GHSA-4h9h-q39g-qf8m
Buffer Over-read in WLAN Embedded SW
Priority LOW 38
Transient DOS while processing received beacon frame.
TI-2023-08053 CVE-2023-21665 · GHSA-vhmc-97xx-rvxh
Incorrect Type Conversion or Cast in Graphics
Priority LOW 38
Memory corruption in Graphics while importing a file.
TI-2024-21919 CVE-2024-33056 · GHSA-w66q-chx8-5439
Buffer Over-read in MProc
Priority LOW 37
Memory corruption when allocating and accessing an entry in an SMEM partition continuously.
TI-2024-14227 CVE-2024-21468 · GHSA-fgff-xg35-xhq9
Use After Free in Kernel
Priority LOW 37
Memory corruption when there is failed unmap operation in GPU.
TI-2023-16251 CVE-2023-33066 · GHSA-xcr6-9x44-6hpq
Use of Out-of-range Pointer Offset in Audio
Priority LOW 37
Memory corruption in Audio while processing RT proxy port register driver.
TI-2023-16221 CVE-2023-33033 · GHSA-wxqg-47fv-wf96
Use of Out-of-range Pointer Offset in Audio
Priority LOW 37
Memory corruption in Audio during playback with speaker protection.
TI-2023-10348 CVE-2023-24849 · GHSA-m57v-fhqq-h74x
Buffer Over-read in Data Modem
Priority LOW 36
Information Disclosure in data Modem while parsing an FMTP line in an SDP message.
TI-2023-10347 CVE-2023-24848 · GHSA-xj6f-mr2f-7c6m
Buffer Over-read in Data Modem
Priority LOW 36
Information Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line value.
TI-2022-19220 CVE-2022-40503 · GHSA-h95q-46mc-6g3w
Buffer over-read in Bluetooth Host.
Priority LOW 36
Information disclosure due to buffer over-read in Bluetooth Host while A2DP streaming.
TI-2025-29832 CVE-2025-47320 · GHSA-25c8-fq6j-8vvf
Out-of-bounds Write in Audio
Priority LOW 35
Memory corruption while processing MFC channel configuration during music playback.
TI-2025-19923 CVE-2025-27053 · GHSA-jgwx-g3h6-cg8j
Incorrect Calculation of Buffer Size in HLOS
Priority LOW 35
Memory corruption during PlayReady APP usecase while processing TA commands.