Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

340 records

Vendor: Qualcomm Component: Mdm9150 Firmware Clear all filters
TI-2021-10798 CVE-2021-30299 · GHSA-g9p5-q86f-758v

Improper Input Validation in Audio

Priority LOW 30

Possible out of bound access in audio module due to lack of validation of user provided input.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00122 Published 2024-11-22 No fix listed CWE-20
TI-2022-19225 CVE-2022-40510 · GHSA-6f27-8674-h7p8

Buffer copy without checking size of input in Audio.

Priority MEDIUM 43

Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00427 Published 2023-08-08 No fix listed CWE-457
TI-2022-19249 CVE-2022-40537 · GHSA-7mvh-wrx9-f9mm

Improper Validation of Array Index in Bluetooth HOST

Priority MEDIUM 42

Memory corruption in Bluetooth HOST while processing the AVRC_PDU_GET_PLAYER_APP_VALUE_TEXT AVRCP response.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00364 Published 2023-03-07 No fix listed CWE-129
TI-2022-19229 CVE-2022-40515 · GHSA-g5q2-299m-wxw3

Double free in Video

Priority MEDIUM 48

Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00326 Published 2023-03-07 No fix listed CWE-415
TI-2022-14668 CVE-2022-33242 · GHSA-5775-77jw-fpqx

Improper authentication in Qualcomm IPC

Priority LOW 35

Memory corruption due to improper authentication in Qualcomm IPC while loading unsigned lib in audio PD.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00141 Published 2023-03-07 No fix listed CWE-287
TI-2022-14641 CVE-2022-33213 · GHSA-jc95-8hq3-w9v4

Memory Corruption in MODEM

Priority MEDIUM 40

Memory corruption in modem due to buffer overflow while processing a PPP packet

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00409 Published 2023-03-07 No fix listed CWE-121
TI-2022-09282 CVE-2022-25705 · GHSA-w9cc-3843-6mhx

Integer Overflow to Buffer Overflow in Modem

Priority LOW 33

Memory corruption in modem due to integer overflow to buffer overflow while handling APDU response

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00125 Published 2023-03-07 No fix listed CWE-680
TI-2022-09276 CVE-2022-25694 · GHSA-rx6m-wjqw-383g

Use of Out-of-range Pointer Offset in MODEM

Priority LOW 37

Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00123 Published 2023-03-07 No fix listed CWE-823
TI-2022-06422 CVE-2022-22075 · GHSA-wjfr-whqg-q776

Information Exposure in Graphics

Priority LOW 26

Information Disclosure in Graphics during GPU context switch.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.0012 Published 2023-03-07 No fix listed CWE-200
TI-2022-14702 CVE-2022-33280 · GHSA-278x-ph66-x5gw

Access of uninitialized pointer in Bluetooth HOST

Priority LOW 38

Memory corruption due to access of uninitialized pointer in Bluetooth HOST while processing the AVRCP packet.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00326 Published 2023-02-09 No fix listed CWE-824
TI-2022-14673 CVE-2022-33248 · GHSA-qjhr-gq7c-8mxc

Integer overflow to buffer overflow in User Identity Module

Priority LOW 33

Memory corruption in User Identity Module due to integer overflow to buffer overflow when a segement is received via qmi http.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00125 Published 2023-02-09 No fix listed CWE-680
TI-2022-14669 CVE-2022-33243 · GHSA-2269-968q-6hcq

Improper access control in Qualcomm IPC

Priority LOW 35

Memory corruption due to improper access control in Qualcomm IPC.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00107 Published 2023-02-09 No fix listed CWE-284
TI-2022-14660 CVE-2022-33233 · GHSA-q3j4-865v-r93h

Configuration weakness in modem

Priority LOW 33

Memory corruption due to configuration weakness in modem wile sending command to write protected files.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00123 Published 2023-02-09 No fix listed CWE-16
TI-2022-19234 CVE-2022-40520 · GHSA-gmmh-m76r-369x

Stack based buffer overflow in Core

Priority MEDIUM 40

Memory corruption due to stack-based buffer overflow in Core

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.007 Published 2023-01-06 No fix listed CWE-787
TI-2022-19233 CVE-2022-40519 · GHSA-mph9-6grh-8w42

Buffer over-read in Core

Priority LOW 29

Information disclosure due to buffer overread in Core

CVSS 3.1MEDIUM 6.8 Local No auth No interaction EPSS 0.00116 Published 2023-01-06 No fix listed CWE-125
TI-2022-19232 CVE-2022-40518 · GHSA-3prv-vwp2-jh9f

Buffer overread in Core

Priority LOW 29

Information disclosure due to buffer overread in Core

CVSS 3.1MEDIUM 6.8 Local No auth No interaction EPSS 0.00116 Published 2023-01-06 No fix listed CWE-125
TI-2022-19231 CVE-2022-40517 · GHSA-4w9g-pxjp-v6rx

Stack based buffer overflow in Core

Priority LOW 37

Memory corruption in core due to stack-based buffer overflow

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00143 Published 2023-01-06 No fix listed CWE-121
TI-2022-19230 CVE-2022-40516 · GHSA-42pq-h6rj-6c6q

Stack-based buffer overflow in Core

Priority MEDIUM 40

Memory corruption in Core due to stack-based buffer overflow.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00874 Published 2023-01-06 No fix listed CWE-121
TI-2022-14720 CVE-2022-33299 · GHSA-9m22-9pp9-3gwc

Null pointer dereference in Bluetooth HOST

Priority LOW 39

Transient DOS due to null pointer dereference in Bluetooth HOST while receiving an attribute protocol PDU with zero length data.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00408 Published 2023-01-06 No fix listed CWE-476
TI-2022-14712 CVE-2022-33290 · GHSA-f73m-w3jg-64qm

Null pointer dereference in Bluetooth HOST

Priority LOW 39

Transient DOS in Bluetooth HOST due to null pointer dereference when a mismatched argument is passed.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00408 Published 2023-01-06 No fix listed CWE-476
TI-2022-14688 CVE-2022-33266 · GHSA-pr88-j677-532x

Integer overflow to buffer overflow in Audio

Priority LOW 33

Memory corruption in Audio due to integer overflow to buffer overflow while music playback of clips like amr,evrc,qcelp with modified content.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00118 Published 2023-01-06 No fix listed CWE-190
TI-2022-09296 CVE-2022-25721 · GHSA-c4gj-hh7r-67qf

Incorrect Type Conversion in Video driver

Priority LOW 35

Memory corruption in video driver due to type confusion error during video playback

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00118 Published 2023-01-06 No fix listed CWE-843
TI-2022-09292 CVE-2022-25717 · GHSA-rcwq-9vjv-m77w

Use-After-Free Issue in Display

Priority LOW 35

Memory corruption in display due to double free while allocating frame buffer memory

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00118 Published 2023-01-06 No fix listed CWE-415
TI-2022-09290 CVE-2022-25715 · GHSA-fh34-55jq-5v6v

Incorrect type casting in Display driver

Priority LOW 35

Memory corruption in display driver due to incorrect type casting while accessing the fence structure fields

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00118 Published 2023-01-06 No fix listed CWE-704
Load more