TI-2023-16248 CVE-2023-33063 · GHSA-534v-34xw-2g2m
Use After Free in DSP Services
Priority CRITICAL 93KEV
Memory corruption in DSP Services during a remote call from HLOS to DSP.
Qualcomm
Records3060All Threatist records
Exploited (KEV)12In CISA KEV
CVSS critical678CVSS 9.0–10.0
CVSS high1984CVSS 7.0–8.9
Exploited now
Qualcomm records in CISA KEVTI-2026-17287 Qualcomm Multiple Chipsets Memory Corruption Vulnerability TI-2025-15440 Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability TI-2025-15441 Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability TI-2025-19908 Qualcomm Multiple Chipsets Use-After-Free Vulnerability TI-2024-28736 Qualcomm Multiple Chipsets Use-After-Free Vulnerability TI-2022-06419 Qualcomm Multiple Chipsets Use-After-Free Vulnerability
Components
Products in the NVD configurations · select one to filter the recordsRecords
33 records in Apq5053-aa Firmware · all components
TI-2023-16255 CVE-2023-33070 · GHSA-9cq4-qvx2-f3hh
Improper Authentication in Automotive OS
Priority MEDIUM 64
Transient DOS in Automotive OS due to improper authentication to the secure IO calls.
TI-2023-13072 CVE-2023-28540 · GHSA-fmqm-mv4m-4vh3
Improper Authentication in Data Modem
Priority MEDIUM 48
Cryptographic issue in Data Modem due to improper authentication during TLS handshake.
TI-2023-08645 CVE-2023-22385 · GHSA-4vv2-435c-33ch
Buffer Over-read in Data Modem
Priority MEDIUM 42
Memory Corruption in Data Modem while making a MO call or MT VOLTE call.
TI-2023-16263 CVE-2023-33080 · GHSA-rh2q-252v-ccqc
Buffer over-read in WLAN Firmware
Priority LOW 39
Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management frame.
TI-2023-16239 CVE-2023-33054 · GHSA-9v76-xcm4-wwhw
Improper Authentication in GPS HLOS Driver
Priority LOW 39
Cryptographic issue in GPS HLOS Driver while downloading Qualcomm GNSS assistance data.
TI-2023-16215 CVE-2023-33027 · GHSA-hxqc-xv34-842x
Buffer Over-read in WLAN Firmware
Priority LOW 39
Transient DOS in WLAN Firmware while parsing rsn ies.
TI-2023-16210 CVE-2023-33022 · GHSA-48vm-fq56-767f
Integer Overflow to Buffer Overflow in HLOS
Priority LOW 38
Memory corruption in HLOS while invoking IOCTL calls from user-space.
TI-2023-08053 CVE-2023-21665 · GHSA-vhmc-97xx-rvxh
Incorrect Type Conversion or Cast in Graphics
Priority LOW 38
Memory corruption in Graphics while importing a file.
TI-2024-14220 CVE-2024-21461 · GHSA-56fc-m9wv-h689
Double Free in HLOS
Priority LOW 37
Memory corruption while performing finish HMAC operation when context is freed by keymaster.
TI-2022-14697 CVE-2022-33275 · GHSA-jv4q-hvqc-9497
Improper validation of array index in WLAN HAL
Priority LOW 37
Memory corruption due to improper validation of array index in WLAN HAL when received lm_itemNum is out of range.
TI-2023-10347 CVE-2023-24848 · GHSA-xj6f-mr2f-7c6m
Buffer Over-read in Data Modem
Priority LOW 36
Information Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line value.
TI-2023-08054 CVE-2023-21666 · GHSA-pwqv-pfwc-3854
Improper Release of Memory Before Removing Last Reference (`Memory Leak`) in Graphics
Priority LOW 36
Memory Corruption in Graphics while accessing a buffer allocated through the graphics pool.
TI-2022-19220 CVE-2022-40503 · GHSA-h95q-46mc-6g3w
Buffer over-read in Bluetooth Host.
Priority LOW 36
Information disclosure due to buffer over-read in Bluetooth Host while A2DP streaming.
TI-2023-16244 CVE-2023-33059 · GHSA-9qfg-vjxj-gjf3
Buffer Copy Without Checking Size of Input in Audio
Priority LOW 35
Memory corruption in Audio while processing the VOC packet data from ADSP.
TI-2023-16240 CVE-2023-33055 · GHSA-xvfh-vpm8-j2fh
Buffer Copy Without Checking Size of Input in Audio
Priority LOW 35
Memory Corruption in Audio while invoking callback function in driver from ADSP.
TI-2023-16223 CVE-2023-33035 · GHSA-6wrq-9mv3-g6fm
Buffer Copy Without Checking Size of Input in Audio
Priority LOW 35
Memory corruption while invoking callback function of AFE from ADSP.
TI-2023-16222 CVE-2023-33034 · GHSA-p5pp-ppfp-mrrh
Signed-to-unsigned conversion error in Audio
Priority LOW 35
Memory corruption while parsing the ADSP response command.
TI-2023-16219 CVE-2023-33031 · GHSA-x4vh-ch66-jvcq
Buffer Copy Without Checking Size of Input in Automotive Audio
Priority LOW 35
Memory corruption in Automotive Audio while copying data from ADSP shared buffer to the VOC packet data buffer.
TI-2023-16206 CVE-2023-33018 · GHSA-rw95-68xg-rf7m
Integer Overflow to Buffer Overflow in User Identity Module
Priority LOW 35
Memory corruption while using the UIM diag command to get the operators name.
TI-2023-13091 CVE-2023-28560 · GHSA-cmgw-jmjc-q6wf
Buffer Copy Without Checking Size of Input in WLAN HAL
Priority LOW 35
Memory corruption in WLAN HAL while processing devIndex from untrusted WMI payload.
TI-2023-13069 CVE-2023-28537 · GHSA-hwh2-grqv-74jx
Integer Overflow or Wraparound in Audio
Priority LOW 35
Memory corruption while allocating memory in COmxApeDec module in Audio.
TI-2023-10349 CVE-2023-24850 · GHSA-89vx-cxp7-mr48
Improper Validation of Array Index in HLOS
Priority LOW 35
Memory Corruption in HLOS while importing a cryptographic key into KeyMaster Trusted Application.
TI-2022-19244 CVE-2022-40532 · GHSA-767v-xrqh-x67m
Integer overflow or wraparound in WLAN
Priority LOW 35
Memory corruption due to integer overflow or wraparound in WLAN while sending WMI cmd from host to target.
TI-2022-14686 CVE-2022-33264 · GHSA-99qf-r2vf-9g8f
Stack-based buffer overflow in Modem
Priority LOW 35
Memory corruption in modem due to stack based buffer overflow while parsing OTASP Key Generation Request Message.