TI-2023-16287 CVE-2023-33107 · GHSA-wg3g-ggh3-7wgp
Integer Overflow or Wraparound in Graphics Linux
Priority CRITICAL 96KEV
Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.
Qualcomm
Records3060All Threatist records
Exploited (KEV)12In CISA KEV
CVSS critical678CVSS 9.0–10.0
CVSS high1984CVSS 7.0–8.9
Exploited now
Qualcomm records in CISA KEVTI-2026-17287 Qualcomm Multiple Chipsets Memory Corruption Vulnerability TI-2025-15440 Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability TI-2025-15441 Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability TI-2025-19908 Qualcomm Multiple Chipsets Use-After-Free Vulnerability TI-2024-28736 Qualcomm Multiple Chipsets Use-After-Free Vulnerability TI-2022-06419 Qualcomm Multiple Chipsets Use-After-Free Vulnerability
Components
Products in the NVD configurations · select one to filter the recordsRecords
38 records in Snapdragon 425 Mobile Platform Firmware · all components
TI-2023-16248 CVE-2023-33063 · GHSA-534v-34xw-2g2m
Use After Free in DSP Services
Priority CRITICAL 93KEV
Memory corruption in DSP Services during a remote call from HLOS to DSP.
TI-2025-15444 CVE-2025-21483 · GHSA-jg77-qwrp-9pph
Improper Restriction of Operations within the Bounds of a Memory Buffer in Data Network Stack & Connectivity
Priority MEDIUM 49
Memory corruption when the UE receives an RTP packet from the network, during the reassembly of NALUs.
TI-2023-08648 CVE-2023-22388 · GHSA-pgw3-2gjq-fhgr
Use of Out-of-range Pointer Offset in Multi-mode Call Processor
Priority MEDIUM 49
Memory Corruption in Multi-mode Call Processor while processing bit mask API.
TI-2023-08645 CVE-2023-22385 · GHSA-4vv2-435c-33ch
Buffer Over-read in Data Modem
Priority MEDIUM 42
Memory Corruption in Data Modem while making a MO call or MT VOLTE call.
TI-2025-15448 CVE-2025-21487 · GHSA-j4c6-9q52-52q7
Buffer Over-read in Data Network Stack & Connectivity
Priority MEDIUM 41
Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length.
TI-2024-35504 CVE-2024-53026 · GHSA-w4q4-rw8x-3296
Buffer Over-read in Data Network Stack & Connectivity
Priority MEDIUM 41
Information disclosure when an invalid RTCP packet is received during a VoLTE/VoWiFi IMS call.
TI-2024-35499 CVE-2024-53021 · GHSA-qm7w-cjmv-j299
Buffer Over-read in Data Network Stack & Connectivity
Priority MEDIUM 41
Information disclosure may occur while processing goodbye RTCP packet from network.
TI-2024-35498 CVE-2024-53020 · GHSA-w9f5-6mhq-cp5w
Buffer Over-read in Data Network Stack & Connectivity
Priority MEDIUM 41
Information disclosure may occur while decoding the RTP packet with invalid header extension from network.
TI-2024-15459 CVE-2024-23359 · GHSA-5p64-6fh9-j56j
Buffer Over-read in Multi Mode Call Processor
Priority MEDIUM 41
Information disclosure while decoding Tracking Area Update Accept or Attach Accept message received from network.
TI-2023-16218 CVE-2023-33030 · GHSA-rh7v-fmqc-c7rj
Buffer Copy without Checking Size of Input in HLOS
Priority MEDIUM 41
Memory corruption in HLOS while running playready use-case.
TI-2025-15392 CVE-2025-21428 · GHSA-4rmv-m7cx-wvg4
Buffer Over-read in WLAN Host
Priority MEDIUM 40
Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request from the AP to establish a TSpec session.
TI-2024-15453 CVE-2024-23353 · GHSA-6cvr-wmr3-636f
Buffer Over-read in Multi Mode Call Processor
Priority LOW 39
Transient DOS while decoding attach reject message received by UE, when IEI is set to ESM_IEI.
TI-2024-15482 CVE-2024-23385 · GHSA-q97v-2cp6-jv6p
Reachable Assertion in Modem
Priority LOW 38
Transient DOS as modem reset occurs when an unexpected MAC RAR (with invalid PDU length) is seen at UE.
TI-2024-15458 CVE-2024-23358 · GHSA-2xv6-3vp8-pp7j
Buffer Over-read in Multi Mode Call Processor
Priority LOW 38
Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in Modem.
TI-2024-14220 CVE-2024-21461 · GHSA-56fc-m9wv-h689
Double Free in HLOS
Priority LOW 37
Memory corruption while performing finish HMAC operation when context is freed by keymaster.
TI-2023-16221 CVE-2023-33033 · GHSA-wxqg-47fv-wf96
Use of Out-of-range Pointer Offset in Audio
Priority LOW 37
Memory corruption in Audio during playback with speaker protection.
TI-2023-10348 CVE-2023-24849 · GHSA-m57v-fhqq-h74x
Buffer Over-read in Data Modem
Priority LOW 36
Information Disclosure in data Modem while parsing an FMTP line in an SDP message.
TI-2023-10347 CVE-2023-24848 · GHSA-xj6f-mr2f-7c6m
Buffer Over-read in Data Modem
Priority LOW 36
Information Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line value.
TI-2025-19923 CVE-2025-27053 · GHSA-jgwx-g3h6-cg8j
Incorrect Calculation of Buffer Size in HLOS
Priority LOW 35
Memory corruption during PlayReady APP usecase while processing TA commands.
TI-2024-28741 CVE-2024-43052 · GHSA-mw8r-ffhf-5qvw
Improper Input Validation in Video Analytics and Processing
Priority LOW 35
Memory corruption while processing API calls to NPU with invalid input.
TI-2024-25673 CVE-2024-38423 · GHSA-fr3q-8g9r-hvpv
Buffer Copy Without Checking Size of Input in Graphics Linux
Priority LOW 35
Memory corruption while processing GPU page table switch.
TI-2024-25672 CVE-2024-38422 · GHSA-3qgc-vrvv-mv2r
Integer Overflow to Buffer Overflow in Audio
Priority LOW 35
Memory corruption while processing voice packet with arbitrary data received from ADSP.
TI-2023-16290 CVE-2023-33110 · GHSA-vw9c-c8qf-hw7g
Use of Out-of-range Pointer Offset in Audio
Priority LOW 35
The session index variable in PCM host voice audio driver initialized before PCM open, accessed during event callback from ADSP and reset during PCM close may lead to race condition between event callback - PCM close and…
TI-2023-16244 CVE-2023-33059 · GHSA-9qfg-vjxj-gjf3
Buffer Copy Without Checking Size of Input in Audio
Priority LOW 35
Memory corruption in Audio while processing the VOC packet data from ADSP.