Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

115 records

Vendor: Qualcomm Component: 315 5g Iot Modem Firmware Clear all filters
TI-2025-19924 CVE-2025-27054 · GHSA-hwcw-37m9-g3f9

Out-of-bounds Write in Display

Priority LOW 35

Memory corruption while processing a malformed license file during reboot.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00089 Published 2025-10-09 No fix listed CWE-787
TI-2025-19923 CVE-2025-27053 · GHSA-jgwx-g3h6-cg8j

Incorrect Calculation of Buffer Size in HLOS

Priority LOW 35

Memory corruption during PlayReady APP usecase while processing TA commands.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00089 Published 2025-10-09 No fix listed CWE-131
TI-2025-15443 CVE-2025-21482 · GHSA-mv3f-wvhc-h8hg

Cryptographic Issues in Core

Priority LOW 32

Cryptographic issue while performing RSA PKCS padding decoding.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00087 Published 2025-09-24 No fix listed CWE-310
TI-2025-15442 CVE-2025-21481 · GHSA-2324-r4hv-6h34

Buffer Copy Without Checking Size of Input in HLOS

Priority LOW 35

Memory corruption while performing private key encryption in trusted application.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00074 Published 2025-09-24 No fix listed CWE-120
TI-2025-19936 CVE-2025-27066 · GHSA-hgjc-f253-c7xh

Reachable Assertion in WLAN Firmware

Priority LOW 39

Transient DOS while processing an ANQP message.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0033 Published 2025-08-06 No fix listed CWE-617
TI-2025-19932 CVE-2025-27062 · GHSA-7866-77f5-4jpp

Improper Access Control in Automotive Multimedia

Priority LOW 35

Memory corruption while handling client exceptions, allowing unauthorized channel access.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0009 Published 2025-08-06 No fix listed CWE-284
TI-2025-15439 CVE-2025-21477 · GHSA-4j97-w2pw-9q28

Improper Input Validation in Modem

Priority LOW 38

Transient DOS while processing CCCH data when NW sends data with invalid length.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00255 Published 2025-08-06 No fix listed CWE-20
TI-2025-15428 CVE-2025-21465 · GHSA-956w-8xxp-mq5x

Out-of-bounds Read in Core

Priority LOW 27

Information disclosure while processing the hash segment in an MBN file.

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00097 Published 2025-08-06 No fix listed CWE-125
TI-2025-15427 CVE-2025-21464 · GHSA-9fgc-v6c2-ff44

Out-of-bounds Read in Core

Priority LOW 27

Information disclosure while reading data from an image using specified offset and size parameters.

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00097 Published 2025-08-06 No fix listed CWE-125
TI-2025-15415 CVE-2025-21452 · GHSA-9jx4-fvc9-gc34

Reachable Assertion in Modem

Priority LOW 32

Transient DOS while processing a random-access response (RAR) with an invalid PDU length on LTE network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00243 Published 2025-08-06 No fix listed CWE-617
TI-2025-19912 CVE-2025-27042 · GHSA-m7f9-7vr6-8wcw

Incorrect Calculation of Buffer Size in Video

Priority LOW 35

Memory corruption while processing video packets received from video firmware.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00094 Published 2025-07-08 No fix listed CWE-131
TI-2025-15417 CVE-2025-21454 · GHSA-4h9h-q39g-qf8m

Buffer Over-read in WLAN Embedded SW

Priority LOW 38

Transient DOS while processing received beacon frame.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00244 Published 2025-07-08 No fix listed CWE-126
TI-2025-15416 CVE-2025-21453 · GHSA-hh2j-g84c-6hvv

Use After Free in GPS HLOS Driver

Priority LOW 35

Memory corruption while processing a data structure, when an iterator is accessed after it has been removed, potential failures occur.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00107 Published 2025-05-06 No fix listed CWE-416
TI-2025-15412 CVE-2025-21448 · GHSA-f4p6-w7ph-5gqm

Buffer Over-read in WLAN Firmware

Priority LOW 38

Transient DOS may occur while parsing SSID in action frames.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00267 Published 2025-04-07 No fix listed CWE-126
TI-2025-15394 CVE-2025-21430 · GHSA-c8ww-p8qh-gjr8

Buffer Over-read in WLAN Host

Priority MEDIUM 40

Transient DOS while connecting STA to AP and initiating ADD TS request from AP to establish TSpec session.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00267 Published 2025-04-07 No fix listed CWE-126
TI-2024-28735 CVE-2024-43046 · GHSA-r5vv-rjc7-pfg5

Information Exposure in TZ Secure OS

Priority LOW 24

There may be information disclosure during memory re-allocation in TZ Secure OS.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00115 Published 2025-04-07 No fix listed CWE-200
TI-2025-15388 CVE-2025-21424 · GHSA-q98w-g5j8-3x6h

Use After Free in NPU

Priority LOW 35

Memory corruption while calling the NPU driver APIs concurrently.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00117 Published 2025-03-03 No fix listed CWE-416
TI-2024-35492 CVE-2024-53014 · GHSA-32hq-jmxj-p7pr

Improper Validation of Array Index in Audio

Priority LOW 35

Memory corruption may occur while validating ports and channels in Audio driver.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00124 Published 2025-03-03 No fix listed CWE-129
TI-2024-21919 CVE-2024-33056 · GHSA-w66q-chx8-5439

Buffer Over-read in MProc

Priority LOW 37

Memory corruption when allocating and accessing an entry in an SMEM partition continuously.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00104 Published 2024-12-02 No fix listed CWE-126
TI-2024-21908 CVE-2024-33044 · GHSA-rj89-pvp9-vqg3

Improper Validation of Array Index in Hypervisor

Priority LOW 37

Memory corruption while Configuring the SMR/S2CR register in Bypass mode.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00105 Published 2024-12-02 No fix listed CWE-129
TI-2024-25672 CVE-2024-38422 · GHSA-3qgc-vrvv-mv2r

Integer Overflow to Buffer Overflow in Audio

Priority LOW 35

Memory corruption while processing voice packet with arbitrary data received from ADSP.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00103 Published 2024-11-04 No fix listed CWE-680
TI-2024-25658 CVE-2024-38408 · GHSA-wqm7-xh9j-c3ff

Cryptographic Issues in BT Controller

Priority MEDIUM 44

Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00145 Published 2024-11-04 No fix listed CWE-310
Load more