Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

110 records

Vendor: Qualcomm Component: Mdm8207 Firmware Clear all filters
TI-2025-29895 CVE-2025-47383 · GHSA-mrhm-mr9g-wpx6

Missing Cryptographic Step in Data Modem

Priority LOW 33

Weak configuration may lead to cryptographic issue when a VoWiFi call is triggered from UE.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00146 Published 2026-03-02 No fix listed CWE-325
TI-2025-19923 CVE-2025-27053 · GHSA-jgwx-g3h6-cg8j

Incorrect Calculation of Buffer Size in HLOS

Priority LOW 35

Memory corruption during PlayReady APP usecase while processing TA commands.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00089 Published 2025-10-09 No fix listed CWE-131
TI-2025-15443 CVE-2025-21482 · GHSA-mv3f-wvhc-h8hg

Cryptographic Issues in Core

Priority LOW 32

Cryptographic issue while performing RSA PKCS padding decoding.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00087 Published 2025-09-24 No fix listed CWE-310
TI-2024-21919 CVE-2024-33056 · GHSA-w66q-chx8-5439

Buffer Over-read in MProc

Priority LOW 37

Memory corruption when allocating and accessing an entry in an SMEM partition continuously.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00104 Published 2024-12-02 No fix listed CWE-126
TI-2024-15453 CVE-2024-23353 · GHSA-6cvr-wmr3-636f

Buffer Over-read in Multi Mode Call Processor

Priority LOW 39

Transient DOS while decoding attach reject message received by UE, when IEI is set to ESM_IEI.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00346 Published 2024-08-05 No fix listed CWE-126
TI-2023-23308 CVE-2023-43551 · GHSA-4h56-hghf-36cj

Improper Authentication in Multi-Mode Call Processor

Priority MEDIUM 47

Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00256 Published 2024-06-03 No fix listed CWE-287
TI-2023-16251 CVE-2023-33066 · GHSA-xcr6-9x44-6hpq

Use of Out-of-range Pointer Offset in Audio

Priority LOW 37

Memory corruption in Audio while processing RT proxy port register driver.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00111 Published 2024-03-04 No fix listed CWE-823
TI-2023-16221 CVE-2023-33033 · GHSA-wxqg-47fv-wf96

Use of Out-of-range Pointer Offset in Audio

Priority LOW 37

Memory corruption in Audio during playback with speaker protection.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00119 Published 2024-01-02 No fix listed CWE-823
TI-2023-16205 CVE-2023-33017 · GHSA-xmc3-8wf5-r59w

Buffer Copy Without Checking Size of Input in Boot

Priority LOW 33

Memory corruption in Boot while running a ListVars test in UEFI Menu during boot.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00157 Published 2023-12-05 No fix listed CWE-120
TI-2023-10348 CVE-2023-24849 · GHSA-m57v-fhqq-h74x

Buffer Over-read in Data Modem

Priority LOW 36

Information Disclosure in data Modem while parsing an FMTP line in an SDP message.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00358 Published 2023-10-03 No fix listed CWE-126
TI-2023-10347 CVE-2023-24848 · GHSA-xj6f-mr2f-7c6m

Buffer Over-read in Data Modem

Priority LOW 36

Information Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line value.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00358 Published 2023-10-03 No fix listed CWE-126
TI-2023-08645 CVE-2023-22385 · GHSA-4vv2-435c-33ch

Buffer Over-read in Data Modem

Priority MEDIUM 42

Memory Corruption in Data Modem while making a MO call or MT VOLTE call.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00422 Published 2023-10-03 No fix listed CWE-126
TI-2023-08015 CVE-2023-21626 · GHSA-mx82-492r-vjvf

Improper Authentication in HLOS.

Priority LOW 32

Cryptographic issue in HLOS due to improper authentication while performing key velocity checks using more than one key.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00109 Published 2023-08-08 No fix listed CWE-320
TI-2022-19225 CVE-2022-40510 · GHSA-6f27-8674-h7p8

Buffer copy without checking size of input in Audio.

Priority MEDIUM 43

Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00427 Published 2023-08-08 No fix listed CWE-457
TI-2022-19235 CVE-2022-40521 · GHSA-8f4c-mxmx-gjgv

Improper authorization in Modem

Priority LOW 33

Transient DOS due to improper authorization in Modem

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00354 Published 2023-06-06 No fix listed CWE-285
TI-2022-19223 CVE-2022-40507 · GHSA-wcg5-6pc8-hjf5

Double free in Core

Priority MEDIUM 41

Memory corruption due to double free in Core while mapping HLOS address to the list.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.01305 Published 2023-06-06 No fix listed CWE-415
TI-2022-14686 CVE-2022-33264 · GHSA-99qf-r2vf-9g8f

Stack-based buffer overflow in Modem

Priority LOW 35

Memory corruption in modem due to stack based buffer overflow while parsing OTASP Key Generation Request Message.

CVSS 3.1HIGH 7.9 Local Low privileges No interaction EPSS 0.00115 Published 2023-06-06 No fix listed CWE-121
TI-2022-06423 CVE-2022-22076 · GHSA-qj32-9f3j-xp9f

Cryptographic issue in Core

Priority LOW 30

information disclosure due to cryptographic issue in Core during RPMB read request.

CVSS 3.1HIGH 7.1 Local No auth No interaction EPSS 0.00113 Published 2023-06-06 No fix listed CWE-310
TI-2022-19222 CVE-2022-40505 · GHSA-4p3h-qrpg-h7hr

Buffer over-read in Modem

Priority MEDIUM 42

Information disclosure due to buffer over-read in Modem while parsing DNS hostname.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00354 Published 2023-05-02 No fix listed CWE-126
TI-2022-14725 CVE-2022-33304 · GHSA-8wvv-chwp-prvw

NULL pointers dereference in Modem

Priority LOW 39

Transient DOS due to NULL pointer dereference in Modem while performing pullup for received TCP/UDP packet.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00383 Published 2023-05-02 No fix listed CWE-476
Load more