Vulnerabilities

TI-2023-16263 CVE-2023-33080 · GHSA-rh2q-252v-ccqc

Buffer over-read in WLAN Firmware

LOW 39

Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management frame.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00338 Published 2023-12-05 No fix listed CWE-126

TI-2023-16248 CVE-2023-33063 · GHSA-534v-34xw-2g2m

Use After Free in DSP Services

CRITICAL 93KEV

Memory corruption in DSP Services during a remote call from HLOS to DSP.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00672 Published 2023-12-05 No fix listed CWE-416

TI-2023-16239 CVE-2023-33054 · GHSA-9v76-xcm4-wwhw

Improper Authentication in GPS HLOS Driver

LOW 39

Cryptographic issue in GPS HLOS Driver while downloading Qualcomm GNSS assistance data.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00361 Published 2023-12-05 No fix listed CWE-287

TI-2023-16212 CVE-2023-33024 · GHSA-vf4c-wm58-vmmq

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Radio Interface Layer

LOW 35

Memory corruption while sending SMS from AP firmware.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00156 Published 2023-12-05 No fix listed CWE-120

TI-2023-16206 CVE-2023-33018 · GHSA-rw95-68xg-rf7m

Integer Overflow to Buffer Overflow in User Identity Module

LOW 35

Memory corruption while using the UIM diag command to get the operators name.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0011 Published 2023-12-05 No fix listed CWE-680

TI-2023-16244 CVE-2023-33059 · GHSA-9qfg-vjxj-gjf3

Buffer Copy Without Checking Size of Input in Audio

LOW 35

Memory corruption in Audio while processing the VOC packet data from ADSP.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00117 Published 2023-11-07 No fix listed CWE-191

TI-2023-16215 CVE-2023-33027 · GHSA-hxqc-xv34-842x

Buffer Over-read in WLAN Firmware

LOW 39

Transient DOS in WLAN Firmware while parsing rsn ies.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00387 Published 2023-10-03 No fix listed CWE-126

TI-2023-13102 CVE-2023-28571 · GHSA-q2gh-hfh3-q82q

Buffer Over-read in WLAN HOST

LOW 26

Information disclosure in WLAN HOST while processing the WLAN scan descriptor list during roaming scan.

CVSS 3.1MEDIUM 6.1 Local Low privileges No interaction EPSS 0.00113 Published 2023-10-03 No fix listed CWE-126

TI-2023-13091 CVE-2023-28560 · GHSA-cmgw-jmjc-q6wf

Buffer Copy Without Checking Size of Input in WLAN HAL

LOW 35

Memory corruption in WLAN HAL while processing devIndex from untrusted WMI payload.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00116 Published 2023-09-05 No fix listed CWE-120

TI-2023-13069 CVE-2023-28537 · GHSA-hwh2-grqv-74jx

Integer Overflow or Wraparound in Audio

LOW 35

Memory corruption while allocating memory in COmxApeDec module in Audio.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00116 Published 2023-08-08 No fix listed CWE-190

TI-2022-14658 CVE-2022-33231 · GHSA-h9v3-m6cc-qpv3

Double free in Core

LOW 39

Memory corruption due to double free in core while initializing the encryption key.

CVSS 3.1CRITICAL 9.3 Local No auth No interaction EPSS 0.0008 Published 2023-04-04 No fix listed CWE-415

Vulnerabilities

Filters