Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

33 records

Vendor: Qualcomm Component: Apq5053-aa Firmware Clear all filters
TI-2024-14220 CVE-2024-21461 · GHSA-56fc-m9wv-h689

Double Free in HLOS

Priority LOW 37

Memory corruption while performing finish HMAC operation when context is freed by keymaster.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00104 Published 2024-07-01 No fix listed CWE-415
TI-2023-16263 CVE-2023-33080 · GHSA-rh2q-252v-ccqc

Buffer over-read in WLAN Firmware

Priority LOW 39

Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management frame.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00338 Published 2023-12-05 No fix listed CWE-126
TI-2023-16262 CVE-2023-33079 · GHSA-h36p-v4x7-w44w

Use of Out-of-range Pointer Offset in Audio

Priority LOW 33

Memory corruption in Audio while running invalid audio recording from ADSP.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00157 Published 2023-12-05 No fix listed CWE-823
TI-2023-16255 CVE-2023-33070 · GHSA-9cq4-qvx2-f3hh

Improper Authentication in Automotive OS

Priority MEDIUM 64

Transient DOS in Automotive OS due to improper authentication to the secure IO calls.

CVSS 3.1HIGH 7.1 Local No auth No interaction EPSS 0.00141 Published 2023-12-05 No fix listed CWE-287
TI-2023-16248 CVE-2023-33063 · GHSA-534v-34xw-2g2m

Use After Free in DSP Services

Priority CRITICAL 93KEV

Memory corruption in DSP Services during a remote call from HLOS to DSP.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00672 Published 2023-12-05 No fix listed CWE-416
TI-2023-16239 CVE-2023-33054 · GHSA-9v76-xcm4-wwhw

Improper Authentication in GPS HLOS Driver

Priority LOW 39

Cryptographic issue in GPS HLOS Driver while downloading Qualcomm GNSS assistance data.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00361 Published 2023-12-05 No fix listed CWE-287
TI-2023-16210 CVE-2023-33022 · GHSA-48vm-fq56-767f

Integer Overflow to Buffer Overflow in HLOS

Priority LOW 38

Memory corruption in HLOS while invoking IOCTL calls from user-space.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00159 Published 2023-12-05 No fix listed CWE-680
TI-2023-16205 CVE-2023-33017 · GHSA-xmc3-8wf5-r59w

Buffer Copy Without Checking Size of Input in Boot

Priority LOW 33

Memory corruption in Boot while running a ListVars test in UEFI Menu during boot.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00157 Published 2023-12-05 No fix listed CWE-120
TI-2023-16240 CVE-2023-33055 · GHSA-xvfh-vpm8-j2fh

Buffer Copy Without Checking Size of Input in Audio

Priority LOW 35

Memory Corruption in Audio while invoking callback function in driver from ADSP.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00154 Published 2023-11-07 No fix listed CWE-120
TI-2023-16222 CVE-2023-33034 · GHSA-p5pp-ppfp-mrrh

Signed-to-unsigned conversion error in Audio

Priority LOW 35

Memory corruption while parsing the ADSP response command.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00116 Published 2023-10-03 No fix listed CWE-195
TI-2023-16215 CVE-2023-33027 · GHSA-hxqc-xv34-842x

Buffer Over-read in WLAN Firmware

Priority LOW 39

Transient DOS in WLAN Firmware while parsing rsn ies.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00387 Published 2023-10-03 No fix listed CWE-126
TI-2023-13072 CVE-2023-28540 · GHSA-fmqm-mv4m-4vh3

Improper Authentication in Data Modem

Priority MEDIUM 48

Cryptographic issue in Data Modem due to improper authentication during TLS handshake.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00431 Published 2023-10-03 No fix listed CWE-287
TI-2023-10349 CVE-2023-24850 · GHSA-89vx-cxp7-mr48

Improper Validation of Array Index in HLOS

Priority LOW 35

Memory Corruption in HLOS while importing a cryptographic key into KeyMaster Trusted Application.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00116 Published 2023-10-03 No fix listed CWE-129
TI-2023-10347 CVE-2023-24848 · GHSA-xj6f-mr2f-7c6m

Buffer Over-read in Data Modem

Priority LOW 36

Information Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line value.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00358 Published 2023-10-03 No fix listed CWE-126
TI-2023-08645 CVE-2023-22385 · GHSA-4vv2-435c-33ch

Buffer Over-read in Data Modem

Priority MEDIUM 42

Memory Corruption in Data Modem while making a MO call or MT VOLTE call.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00422 Published 2023-10-03 No fix listed CWE-126
TI-2022-14697 CVE-2022-33275 · GHSA-jv4q-hvqc-9497

Improper validation of array index in WLAN HAL

Priority LOW 37

Memory corruption due to improper validation of array index in WLAN HAL when received lm_itemNum is out of range.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00116 Published 2023-09-05 No fix listed CWE-129
TI-2023-13069 CVE-2023-28537 · GHSA-hwh2-grqv-74jx

Integer Overflow or Wraparound in Audio

Priority LOW 35

Memory corruption while allocating memory in COmxApeDec module in Audio.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00116 Published 2023-08-08 No fix listed CWE-190
TI-2022-19235 CVE-2022-40521 · GHSA-8f4c-mxmx-gjgv

Improper authorization in Modem

Priority LOW 33

Transient DOS due to improper authorization in Modem

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00354 Published 2023-06-06 No fix listed CWE-285
TI-2022-14686 CVE-2022-33264 · GHSA-99qf-r2vf-9g8f

Stack-based buffer overflow in Modem

Priority LOW 35

Memory corruption in modem due to stack based buffer overflow while parsing OTASP Key Generation Request Message.

CVSS 3.1HIGH 7.9 Local Low privileges No interaction EPSS 0.00115 Published 2023-06-06 No fix listed CWE-121
Load more