Read the docs
TI-2025-19941 Aliases CVE-2025-27071GHSA-3ff3-h6c4-m2xr

Buffer Copy Without Checking Size of Input in Powerline Communication Firmware

Priority MEDIUM 47CWE-120Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-120 and the CVSS impact.

Summary

Memory corruption while processing specific files in Powerline Communication Firmware.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00212 11th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
QualcommSnapdragonFastConnect 6800; FastConnect 6900; FastConnect 7800; QCA6391; QCA6426; QCA6436; QSM8250; SD865 5G; SDM429W; SDX55; Snapdragon 429 Mobile Platform; Snapdragon 8 Gen 1 Mobile Platform; Snapdragon 865 5G Mobile Platform; Snapdragon 865+ 5G Mobile Platform (SM8250-AB); Snapdragon 870 5G Mobile Platform (SM8250-AC); Snapdragon W5+ Gen 1 Wearable Platform; Snapdragon X55 5G Modem-RF System; Snapdragon XR2 5G Platform; SW5100; SW5100P; SXR2130; SXR2230P; SXR2250P; WCD9380; WCD9385; WCN3620; WCN3660B; WCN3980; WCN3988; WSA8810; WSA8815; WSA8830; WSA8832; WSA8835—No fix listedCNA
  • Snapdragon VendorQualcomm Affected FastConnect 6800; FastConnect 6900; FastConnect 7800; QCA6391; QCA6426; QCA6436; QSM8250; SD865 5G; SDM429W; SDX55; Snapdragon 429 Mobile Platform; Snapdragon 8 Gen 1 Mobile Platform; Snapdragon 865 5G Mobile Platform; Snapdragon 865+ 5G Mobile Platform (SM8250-AB); Snapdragon 870 5G Mobile Platform (SM8250-AC); Snapdragon W5+ Gen 1 Wearable Platform; Snapdragon X55 5G Modem-RF System; Snapdragon XR2 5G Platform; SW5100; SW5100P; SXR2130; SXR2230P; SXR2250P; WCD9380; WCD9385; WCN3620; WCN3660B; WCN3980; WCN3988; WSA8810; WSA8815; WSA8830; WSA8832; WSA8835 Fixed in — No fix listed CNA

CPE configurations NVD · 68

CPEVersionsRoleVendor
cpe:2.3:o:qualcomm:fastconnect_6800_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:fastconnect_6800:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:fastconnect_6900_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:fastconnect_6900:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:fastconnect_7800_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:fastconnect_7800:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:qca6391_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:qca6391:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:qca6426_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:qca6426:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
  • cpe:2.3:o:qualcomm:fastconnect_6800_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:fastconnect_6800:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:fastconnect_6900_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:fastconnect_6900:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:fastconnect_7800_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:fastconnect_7800:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:qca6391_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:qca6391:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:qca6426_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:qca6426:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
Show 58 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:qualcomm:qca6436_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:qca6436:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:qsm8250_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:qsm8250:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:sd865_5g_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:sd865_5g:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:sdm429w_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:sdm429w:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:sdx55_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:sdx55:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:snapdragon_429_mobile_platform_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:snapdragon_429_mobile_platform:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:snapdragon_8_gen_1_mobile_platform_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:snapdragon_8_gen_1_mobile_platform:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:snapdragon_865_5g_mobile_platform_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:snapdragon_865_5g_mobile_platform:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:snapdragon_865\+_5g_mobile_platform_\(sm8250-ab\)_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:snapdragon_865\+_5g_mobile_platform_\(sm8250-ab\):-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:snapdragon_870_5g_mobile_platform_\(sm8250-ac\)_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:snapdragon_870_5g_mobile_platform_\(sm8250-ac\):-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:snapdragon_w5\+_gen_1_wearable_platform_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:snapdragon_w5\+_gen_1_wearable_platform:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:snapdragon_x55_5g_modem-rf_system_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:snapdragon_x55_5g_modem-rf_system:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:snapdragon_xr2_5g_platform_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:snapdragon_xr2_5g_platform:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:sw5100_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:sw5100:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:sw5100p_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:sw5100p:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:sxr2130_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:sxr2130:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:sxr2230p_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:sxr2230p:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:sxr2250p_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:sxr2250p:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:wcd9380_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:wcd9380:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:wcd9385_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:wcd9385:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:wcn3620_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:wcn3620:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:wcn3660b_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:wcn3660b:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:wcn3980_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:wcn3980:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:wcn3988_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:wcn3988:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:wsa8810_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:wsa8810:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:wsa8815_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:wsa8815:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:wsa8830_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:wsa8830:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:wsa8832_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:wsa8832:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:wsa8835_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:wsa8835:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
  • cpe:2.3:o:qualcomm:qca6436_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:qca6436:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:qsm8250_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:qsm8250:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:sd865_5g_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:sd865_5g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:sdm429w_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:sdm429w:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:sdx55_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:sdx55:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:snapdragon_429_mobile_platform_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:snapdragon_429_mobile_platform:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:snapdragon_8_gen_1_mobile_platform_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:snapdragon_8_gen_1_mobile_platform:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:snapdragon_865_5g_mobile_platform_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:snapdragon_865_5g_mobile_platform:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:snapdragon_865\+_5g_mobile_platform_\(sm8250-ab\)_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:snapdragon_865\+_5g_mobile_platform_\(sm8250-ab\):-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:snapdragon_870_5g_mobile_platform_\(sm8250-ac\)_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:snapdragon_870_5g_mobile_platform_\(sm8250-ac\):-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:snapdragon_w5\+_gen_1_wearable_platform_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:snapdragon_w5\+_gen_1_wearable_platform:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:snapdragon_x55_5g_modem-rf_system_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:snapdragon_x55_5g_modem-rf_system:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:snapdragon_xr2_5g_platform_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:snapdragon_xr2_5g_platform:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:sw5100_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:sw5100:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:sw5100p_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:sw5100p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:sxr2130_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:sxr2130:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:sxr2230p_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:sxr2230p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:sxr2250p_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:sxr2250p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:wcd9380_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:wcd9380:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:wcd9385_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:wcd9385:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:wcn3620_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:wcn3620:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:wcn3660b_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:wcn3660b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:wcn3980_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:wcn3980:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:wcn3988_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:wcn3988:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:wsa8810_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:wsa8810:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:wsa8815_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:wsa8815:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:wsa8830_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:wsa8830:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:wsa8832_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:wsa8832:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:wsa8835_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:wsa8835:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-27071
  2. 2026-10-03 Alias added: GHSA-3ff3-h6c4-m2xr

References

  • TI-2025-15441 Incorrect Authorization in Graphics Windows KEVCVSS 3.1HIGH 8.6
  • TI-2025-15440 Incorrect Authorization in Graphics KEVCVSS 3.1HIGH 8.6
  • TI-2023-16287 Integer Overflow or Wraparound in Graphics Linux KEVCVSS 3.1HIGH 8.4
  • TI-2023-16286 Use of Out-of-range Pointer Offset in Graphics KEVCVSS 3.1HIGH 8.4
  • TI-2026-17287 Integer Overflow or Wraparound in Graphics KEVCVSS 3.1HIGH 7.8
  • TI-2024-28736 Use After Free in DSP Service KEVCVSS 3.1HIGH 7.8
See all 330 →

Sources