Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

257 records

Vendor: Qualcomm Component: Csr8811 Firmware Clear all filters
TI-2026-20407 CVE-2026-25275 · GHSA-r23j-xxqv-w996

Buffer Over-read in WLAN Firmware

Priority LOW 39

Transient DOS when processing authentication frames with invalid FILS information element header lengths.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00345 Published 2026-09-17 No fix listed CWE-126
TI-2026-20405 CVE-2026-25268 · GHSA-685v-jj9g-mfg9

Stack-based Buffer Overflow in WLAN Host

Priority LOW 39

Memory Corruption when processing invalid HT40 channel layouts during dynamic channel switching operations.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00106 Published 2026-07-06 No fix listed CWE-121
TI-2026-19414 CVE-2026-24088 · GHSA-frc8-35g4-52pf

Missing Authentication for Critical Function in Boot

Priority LOW 36

Cryptographic Issue while processing a specific partition which allows unauthorized write access to load a customized bootloader.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.00093 Published 2026-06-01 No fix listed CWE-306
TI-2025-37133 CVE-2025-59609 · GHSA-4728-c4x2-h2qm

Buffer Over-read in WLAN Host Communication

Priority LOW 23

Information Disclosure when processing advertisement frames with malformed MBSSID elements of insufficient length.

CVSS 3.1MEDIUM 5.5 Network Low privileges User interaction EPSS 0.00091 Published 2026-06-01 No fix listed CWE-126
TI-2025-29915 CVE-2025-47403 · GHSA-w77j-cqm5-vgh4

Buffer Over-read in WLAN Firmware

Priority LOW 32

Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00216 Published 2026-05-04 No fix listed CWE-126
TI-2026-17270 CVE-2026-21367 · GHSA-78j8-w6rh-444w

Buffer Over-read in WLAN Firmware

Priority LOW 33

Transient DOS when processing nonstandard FILS Discovery Frames with out-of-range action sizes during initial scans.

CVSS 3.1HIGH 7.6 Network High privileges User interaction EPSS 0.00211 Published 2026-04-06 No fix listed CWE-126
TI-2025-29851 CVE-2025-47339 · GHSA-vq6q-rf95-5qf7

Use After Free in HLOS

Priority LOW 35

Memory corruption while deinitializing a HDCP session.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00081 Published 2026-01-06 No fix listed CWE-416
TI-2025-29843 CVE-2025-47331 · GHSA-5pf5-5xph-xfrf

Buffer Over-read in Video

Priority LOW 26

Information disclosure while processing a firmware event.

CVSS 3.1MEDIUM 6.1 Local Low privileges No interaction EPSS 0.00079 Published 2026-01-06 No fix listed CWE-126
TI-2025-29837 CVE-2025-47325 · GHSA-8pj9-4w5f-p42v

Untrusted Pointer Dereference in TZ Firmware

Priority LOW 27

Information disclosure while processing system calls with invalid parameters.

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00079 Published 2025-12-18 No fix listed CWE-822
TI-2025-19910 CVE-2025-27040 · GHSA-p87j-6p3m-4rxg

Improper Input Validation in TZ Firmware

Priority LOW 27

Information disclosure may occur while processing the hypervisor log.

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00086 Published 2025-10-09 No fix listed CWE-20
TI-2025-29838 CVE-2025-47326 · GHSA-xp5r-vf49-64mr

Buffer Over-read in WLAN HAL

Priority LOW 38

Transient DOS while handling command data during power control processing.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00247 Published 2025-09-24 No fix listed CWE-126
TI-2025-15443 CVE-2025-21482 · GHSA-mv3f-wvhc-h8hg

Cryptographic Issues in Core

Priority LOW 32

Cryptographic issue while performing RSA PKCS padding decoding.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00087 Published 2025-09-24 No fix listed CWE-310
TI-2025-19943 CVE-2025-27073 · GHSA-h73x-845j-84q5

Reachable Assertion in WLAN Firmware

Priority LOW 38

Transient DOS while creating NDP instance.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00255 Published 2025-08-06 No fix listed CWE-617
TI-2025-19936 CVE-2025-27066 · GHSA-hgjc-f253-c7xh

Reachable Assertion in WLAN Firmware

Priority LOW 39

Transient DOS while processing an ANQP message.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0033 Published 2025-08-06 No fix listed CWE-617
TI-2025-15428 CVE-2025-21465 · GHSA-956w-8xxp-mq5x

Out-of-bounds Read in Core

Priority LOW 27

Information disclosure while processing the hash segment in an MBN file.

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00097 Published 2025-08-06 No fix listed CWE-125
TI-2025-15427 CVE-2025-21464 · GHSA-9fgc-v6c2-ff44

Out-of-bounds Read in Core

Priority LOW 27

Information disclosure while reading data from an image using specified offset and size parameters.

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00097 Published 2025-08-06 No fix listed CWE-125
TI-2025-19931 CVE-2025-27061 · GHSA-hx53-9v37-vfxw

Out-of-bounds Write in Video

Priority LOW 35

Memory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the video firmware.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.001 Published 2025-07-08 No fix listed CWE-787
TI-2025-19927 CVE-2025-27057 · GHSA-wvfj-6r8w-h76p

Buffer Over-read in WLAN Host

Priority LOW 38

Transient DOS while handling beacon frames with invalid IE header length.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00247 Published 2025-07-08 No fix listed CWE-126
TI-2025-19912 CVE-2025-27042 · GHSA-m7f9-7vr6-8wcw

Incorrect Calculation of Buffer Size in Video

Priority LOW 35

Memory corruption while processing video packets received from video firmware.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00094 Published 2025-07-08 No fix listed CWE-131
TI-2025-15417 CVE-2025-21454 · GHSA-4h9h-q39g-qf8m

Buffer Over-read in WLAN Embedded SW

Priority LOW 38

Transient DOS while processing received beacon frame.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00244 Published 2025-07-08 No fix listed CWE-126
TI-2025-15413 CVE-2025-21449 · GHSA-rg97-846q-ch76

Buffer Over-read in WLAN Embedded SW

Priority LOW 38

Transient DOS may occur while processing malformed length field in SSID IEs.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00244 Published 2025-07-08 No fix listed CWE-126
TI-2025-15410 CVE-2025-21446 · GHSA-vr8p-mwh4-q7pp

Buffer Over-read in WLAN Firmware

Priority LOW 38

Transient DOS may occur when processing vendor-specific information elements while parsing a WLAN frame for BTM requests.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00244 Published 2025-07-08 No fix listed CWE-126
TI-2025-15426 CVE-2025-21463 · GHSA-8crf-388w-629m

Buffer Over-read in WLAN Host Communication

Priority LOW 38

Transient DOS while processing the EHT operation IE in the received beacon frame.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00243 Published 2025-06-03 No fix listed CWE-126
Load more