Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

10 records

Vendor: Qualcomm Component: 205 Firmware Clear all filters
TI-2024-25676 CVE-2024-38426 · GHSA-24vm-48r8-7jq6

Improper Authentication in Modem

Priority LOW 24

While processing the authentication message in UE, improper authentication may lead to information disclosure.

CVSS 3.1MEDIUM 5.4 Adjacent network No auth No interaction EPSS 0.0027 Published 2025-03-03 No fix listed CWE-287
TI-2023-16208 CVE-2023-33020 · GHSA-pw8j-xxwv-qpr8

Improper Authorization in WLAN Host

Priority LOW 33

Transient DOS in WLAN Host when an invalid channel (like channel out of range) is received in STA during CSA IE.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00354 Published 2023-09-05 No fix listed CWE-285
TI-2023-16207 CVE-2023-33019 · GHSA-9pxw-85r8-pc8f

Improper Authorization in WLAN Host

Priority LOW 39

Transient DOS in WLAN Host while doing channel switch announcement (CSA), when a mobile station receives invalid channel in CSA IE.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00354 Published 2023-09-05 No fix listed CWE-285
TI-2023-13106 CVE-2023-28575 · GHSA-32rf-9mpv-rfcv

Multiple Type Confusion Vulnerability

Priority LOW 33

The cam_get_device_priv function does not check the type of handle being returned (device/session/link).

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00122 Published 2023-08-08 No fix listed CWE-823
TI-2023-08842 CVE-2023-22667 · GHSA-rfq5-8cc9-h89m

Integer Overflow or Wraparound in Audio

Priority LOW 37

Memory Corruption in Audio while allocating the ion buffer during the music playback.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00116 Published 2023-07-04 No fix listed CWE-190
TI-2023-08647 CVE-2023-22387 · GHSA-6r2c-g7f8-6rfj

Use of Out-of-range Pointer Offset in Qualcomm IPC

Priority LOW 33

Arbitrary memory overwrite when VM gets compromised in TX write leading to Memory Corruption.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00116 Published 2023-07-04 No fix listed CWE-823
TI-2023-08020 CVE-2023-21631 · GHSA-ccv7-j4hv-3wgx

Improper Input Validation in Modem

Priority MEDIUM 48

Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00362 Published 2023-07-04 No fix listed CWE-20
TI-2023-08018 CVE-2023-21629 · GHSA-wc7f-hjq2-jvv5

Double Free in Modem

Priority LOW 31

Memory Corruption in Modem due to double free while parsing the PKCS15 sim files.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00186 Published 2023-07-04 No fix listed CWE-415