Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

134 records

Vendor: Qualcomm Component: Apq8009w Firmware Clear all filters
TI-2022-19225 CVE-2022-40510 · GHSA-6f27-8674-h7p8

Buffer copy without checking size of input in Audio.

Priority MEDIUM 43

Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00427 Published 2023-08-08 No fix listed CWE-457
TI-2022-19249 CVE-2022-40537 · GHSA-7mvh-wrx9-f9mm

Improper Validation of Array Index in Bluetooth HOST

Priority MEDIUM 42

Memory corruption in Bluetooth HOST while processing the AVRC_PDU_GET_PLAYER_APP_VALUE_TEXT AVRCP response.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00364 Published 2023-03-07 No fix listed CWE-129
TI-2022-19229 CVE-2022-40515 · GHSA-g5q2-299m-wxw3

Double free in Video

Priority MEDIUM 48

Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00326 Published 2023-03-07 No fix listed CWE-415
TI-2022-14641 CVE-2022-33213 · GHSA-jc95-8hq3-w9v4

Memory Corruption in MODEM

Priority MEDIUM 40

Memory corruption in modem due to buffer overflow while processing a PPP packet

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00409 Published 2023-03-07 No fix listed CWE-121
TI-2022-09282 CVE-2022-25705 · GHSA-w9cc-3843-6mhx

Integer Overflow to Buffer Overflow in Modem

Priority LOW 33

Memory corruption in modem due to integer overflow to buffer overflow while handling APDU response

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00125 Published 2023-03-07 No fix listed CWE-680
TI-2022-09276 CVE-2022-25694 · GHSA-rx6m-wjqw-383g

Use of Out-of-range Pointer Offset in MODEM

Priority LOW 37

Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00123 Published 2023-03-07 No fix listed CWE-823
TI-2022-06422 CVE-2022-22075 · GHSA-wjfr-whqg-q776

Information Exposure in Graphics

Priority LOW 26

Information Disclosure in Graphics during GPU context switch.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.0012 Published 2023-03-07 No fix listed CWE-200
TI-2022-14673 CVE-2022-33248 · GHSA-qjhr-gq7c-8mxc

Integer overflow to buffer overflow in User Identity Module

Priority LOW 33

Memory corruption in User Identity Module due to integer overflow to buffer overflow when a segement is received via qmi http.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00125 Published 2023-02-09 No fix listed CWE-680
TI-2022-14660 CVE-2022-33233 · GHSA-q3j4-865v-r93h

Configuration weakness in modem

Priority LOW 33

Memory corruption due to configuration weakness in modem wile sending command to write protected files.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00123 Published 2023-02-09 No fix listed CWE-16
TI-2022-14688 CVE-2022-33266 · GHSA-pr88-j677-532x

Integer overflow to buffer overflow in Audio

Priority LOW 33

Memory corruption in Audio due to integer overflow to buffer overflow while music playback of clips like amr,evrc,qcelp with modified content.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00118 Published 2023-01-06 No fix listed CWE-190
TI-2022-06435 CVE-2022-22088 · GHSA-2rj9-9w62-f3q6

Integer Overflow to Buffer Overflow in Bluetooth HOST

Priority MEDIUM 50

Memory corruption in Bluetooth HOST due to buffer overflow while parsing the command response received from remote

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0054 Published 2023-01-06 No fix listed CWE-787
TI-2022-06426 CVE-2022-22079 · GHSA-hpp8-mh99-fxx9

Buffer Over-read in BOOT

Priority LOW 20

Denial of service while processing fastboot flash command on mmc due to buffer over read

CVSS 3.1MEDIUM 4.6 Physical No auth No interaction EPSS 0.00173 Published 2023-01-06 No fix listed CWE-125
TI-2022-09277 CVE-2022-25695 · GHSA-4h86-c5mg-pxv5

Improper array index validation in Qualcomm Snapdragon Auto, Snapdragon Compute…

Priority LOW 37

Memory corruption in MODEM due to Improper Validation of Array Index while processing GSTK Proactive commands in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industria…

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00126 Published 2022-12-13 No fix listed CWE-129
TI-2022-09266 CVE-2022-25682 · GHSA-4m84-qqp5-f6jr

Memory corruption in Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon…

Priority LOW 37

Memory corruption in MODEM UIM due to usage of out of range pointer offset while decoding command from card in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial…

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00126 Published 2022-12-13 No fix listed CWE-119
TI-2022-09295 CVE-2022-25720 · GHSA-2rr6-hjw5-xch6

Improper array index validation in Qualcomm Snapdragon Auto, Snapdragon Compute…

Priority MEDIUM 49

Memory corruption in WLAN due to out of bound array access during connect/roaming in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Sn…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00507 Published 2022-10-19 No fix listed CWE-129
TI-2022-09294 CVE-2022-25719 · GHSA-v4fg-34wm-hwrr

Out-of-bounds read in Qualcomm Snapdragon Auto, Snapdragon Connectivity, Snapdragon…

Priority MEDIUM 46

Information disclosure in WLAN due to improper length check while processing authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Sn…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00559 Published 2022-10-19 No fix listed CWE-125
TI-2022-09293 CVE-2022-25718 · GHSA-jf8h-prq4-w478

Cryptographic issue in WLAN due to improper check on return value while authentication…

Priority MEDIUM 49

Cryptographic issue in WLAN due to improper check on return value while authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdra…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00497 Published 2022-10-19 No fix listed CWE-252
TI-2022-09269 CVE-2022-25687 · GHSA-7j9c-wwff-h9xc

Buffer overflow in Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity…

Priority MEDIUM 48

memory corruption in video due to buffer overflow while parsing asf clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00389 Published 2022-10-19 No fix listed CWE-120
TI-2022-09283 CVE-2022-25706 · GHSA-w3xv-pf9f-7r5h

Out-of-bounds read in Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon…

Priority LOW 36

Information disclosure in Bluetooth driver due to buffer over-read while reading l2cap length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdrago…

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00437 Published 2022-09-16 No fix listed CWE-125
TI-2022-09270 CVE-2022-25688 · GHSA-fvv8-7jg6-pv3j

Buffer overflow in Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity…

Priority MEDIUM 42

Memory corruption in video due to buffer overflow while parsing ps video clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapd…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0038 Published 2022-09-16 No fix listed CWE-120
TI-2022-09254 CVE-2022-25670 · GHSA-59cm-px3x-hqrm

Out-of-bounds read in Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon…

Priority LOW 34

Denial of service in WLAN HOST due to buffer over read while unpacking frames in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdr…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00589 Published 2022-09-16 No fix listed CWE-125
TI-2022-09253 CVE-2022-25669 · GHSA-x6w3-hmx6-x6rw

Out-of-bounds read in Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon…

Priority LOW 33

Denial of service in video due to buffer over read while parsing MP4 clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00456 Published 2022-09-16 No fix listed CWE-125
Load more