Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

15 records

Vendor: Qualcomm Component: 215 Mobile Platform Firmware Clear all filters
TI-2025-19923 CVE-2025-27053 · GHSA-jgwx-g3h6-cg8j

Incorrect Calculation of Buffer Size in HLOS

Priority LOW 35

Memory corruption during PlayReady APP usecase while processing TA commands.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00089 Published 2025-10-09 No fix listed CWE-131
TI-2025-15448 CVE-2025-21487 · GHSA-j4c6-9q52-52q7

Buffer Over-read in Data Network Stack & Connectivity

Priority MEDIUM 41

Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00269 Published 2025-09-24 No fix listed CWE-126
TI-2024-35504 CVE-2024-53026 · GHSA-w4q4-rw8x-3296

Buffer Over-read in Data Network Stack & Connectivity

Priority MEDIUM 41

Information disclosure when an invalid RTCP packet is received during a VoLTE/VoWiFi IMS call.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00308 Published 2025-06-03 No fix listed CWE-126
TI-2024-35498 CVE-2024-53020 · GHSA-w9f5-6mhq-cp5w

Buffer Over-read in Data Network Stack & Connectivity

Priority MEDIUM 41

Information disclosure may occur while decoding the RTP packet with invalid header extension from network.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00255 Published 2025-06-03 No fix listed CWE-126
TI-2024-25672 CVE-2024-38422 · GHSA-3qgc-vrvv-mv2r

Integer Overflow to Buffer Overflow in Audio

Priority LOW 35

Memory corruption while processing voice packet with arbitrary data received from ADSP.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00103 Published 2024-11-04 No fix listed CWE-680
TI-2024-25665 CVE-2024-38415 · GHSA-5jgq-h327-whqc

Use After Free in Computer Vision

Priority LOW 35

Memory corruption while handling session errors from firmware.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00103 Published 2024-11-04 No fix listed CWE-416
TI-2024-21907 CVE-2024-33043 · GHSA-pq3f-467x-f7v6

Buffer Over-read in FM Host

Priority LOW 23

Transient DOS while handling PS event when Program Service name length offset value is set to 255.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00093 Published 2024-09-02 No fix listed CWE-126
TI-2024-21891 CVE-2024-33027 · GHSA-qvm8-hj6f-mrgr

Improper Access Control in Graphics Linux

Priority LOW 37

Memory corruption can occur when arbitrary user-space app gains kernel level privilege to modify DDR memory by corrupting the GPU page table.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00097 Published 2024-08-05 No fix listed CWE-284
TI-2024-15457 CVE-2024-23357 · GHSA-pf2q-6c5m-pvcj

NULL Pointer Dereference in HLOS

Priority LOW 26

Transient DOS while importing a PKCS#8-encoded RSA key with zero bytes modulus.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00094 Published 2024-08-05 No fix listed CWE-476
TI-2024-15453 CVE-2024-23353 · GHSA-6cvr-wmr3-636f

Buffer Over-read in Multi Mode Call Processor

Priority LOW 39

Transient DOS while decoding attach reject message received by UE, when IEI is set to ESM_IEI.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00346 Published 2024-08-05 No fix listed CWE-126
TI-2024-15470 CVE-2024-23373 · GHSA-wgv9-rgrg-cmg6

Use After Free in Graphics

Priority LOW 37

Memory corruption when IOMMU unmap operation fails, the DMA and anon buffers are getting released.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00149 Published 2024-07-01 No fix listed CWE-416
TI-2024-14220 CVE-2024-21461 · GHSA-56fc-m9wv-h689

Double Free in HLOS

Priority LOW 37

Memory corruption while performing finish HMAC operation when context is freed by keymaster.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00104 Published 2024-07-01 No fix listed CWE-415