Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

197 records

Vendor: Qualcomm Component: Mdm9205 Firmware Clear all filters
TI-2023-08039 CVE-2023-21651 · GHSA-99gr-hqgx-r784

Incorrect Type Conversion or Cast in Core

Priority MEDIUM 41

Memory Corruption in Core due to incorrect type conversion or cast in secure_io_read/write function in TEE.

CVSS 3.1CRITICAL 9.3 Local No auth No interaction EPSS 0.00116 Published 2023-08-08 No fix listed CWE-704
TI-2023-08015 CVE-2023-21626 · GHSA-mx82-492r-vjvf

Improper Authentication in HLOS.

Priority LOW 32

Cryptographic issue in HLOS due to improper authentication while performing key velocity checks using more than one key.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00109 Published 2023-08-08 No fix listed CWE-320
TI-2023-08014 CVE-2023-21625 · GHSA-4ppr-x3rg-ccj6

Buffer Over-read in Network Services

Priority LOW 36

Information disclosure in Network Services due to buffer over-read while the device receives DNS response.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00354 Published 2023-08-08 No fix listed CWE-126
TI-2022-14716 CVE-2022-33295 · GHSA-pxf8-p7rv-qrff

Buffer over-read in Modem

Priority LOW 36

Information disclosure in Modem due to buffer over-read while parsing the wms message received given the buffer and its length.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00354 Published 2023-04-04 No fix listed CWE-126
TI-2022-14715 CVE-2022-33294 · GHSA-5rvg-fpjf-7h7r

NULL pointer dereference in Modem

Priority LOW 33

Transient DOS in Modem due to NULL pointer dereference while receiving response of lwm2m registration/update/bootstrap request message.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00383 Published 2023-04-04 No fix listed CWE-476
TI-2022-14683 CVE-2022-33259 · GHSA-8j5q-w68g-j3wr

Buffer copy without checking the size of input in Modem

Priority MEDIUM 42

Memory corruption due to buffer copy without checking the size of input in modem while decoding raw SMS received.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00417 Published 2023-04-04 No fix listed CWE-120
TI-2022-14682 CVE-2022-33258 · GHSA-v784-rfch-9wq8

Buffer over-read in Modem

Priority MEDIUM 42

Information disclosure due to buffer over-read in modem while reading configuration parameters.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00354 Published 2023-04-04 No fix listed CWE-126
TI-2022-14658 CVE-2022-33231 · GHSA-h9v3-m6cc-qpv3

Double free in Core

Priority LOW 39

Memory corruption due to double free in core while initializing the encryption key.

CVSS 3.1CRITICAL 9.3 Local No auth No interaction EPSS 0.0008 Published 2023-04-04 No fix listed CWE-415
TI-2022-14655 CVE-2022-33228 · GHSA-gmh9-6589-pp6g

Buffer over-read in Modem

Priority LOW 36

Information disclosure sue to buffer over-read in modem while processing ipv6 packet with hop-by-hop or destination option in header.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00354 Published 2023-04-04 No fix listed CWE-126
TI-2022-14650 CVE-2022-33223 · GHSA-3g6h-hmj4-8j2m

Null pointer dereference in Modem

Priority LOW 33

Transient DOS in Modem due to null pointer dereference while processing the incoming packet with http chunked encoding.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00383 Published 2023-04-04 No fix listed CWE-476
TI-2022-14649 CVE-2022-33222 · GHSA-g952-5578-5wvp

Buffer over-read in Modem

Priority LOW 36

Information disclosure due to buffer over-read while parsing DNS response packets in Modem.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00354 Published 2023-04-04 No fix listed CWE-126
TI-2022-14640 CVE-2022-33211 · GHSA-c2xr-v86f-v878

Improper Input Validation in MODEM

Priority MEDIUM 49

memory corruption in modem due to improper check while calculating size of serialized CoAP message

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00417 Published 2023-04-04 No fix listed CWE-20
TI-2022-09321 CVE-2022-25747 · GHSA-cvqv-3452-5q34

Buffer Over-read in MODEM

Priority MEDIUM 42

Information disclosure in modem due to improper input validation during parsing of upcoming CoAP message

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00354 Published 2023-04-04 No fix listed CWE-126
TI-2022-09319 CVE-2022-25745 · GHSA-3288-5p9j-wphm

Always Incorrect Control Flow Implementation in MODEM

Priority MEDIUM 49

Memory corruption in modem due to improper input validation while handling the incoming CoAP message

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00417 Published 2023-04-04 No fix listed CWE-670
TI-2022-09315 CVE-2022-25740 · GHSA-r4hx-pgm4-prgq

Buffer Copy Without Checking Size of Input in MODEM

Priority MEDIUM 49

Memory corruption in modem due to buffer overwrite while building an IPv6 multicast address based on the MAC address of the iface

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00417 Published 2023-04-04 No fix listed CWE-120
TI-2022-09314 CVE-2022-25739 · GHSA-gwwh-g689-9jvg

Null Point Dereference in MODEM

Priority MEDIUM 41

Denial of service in modem due to missing null check while processing the ipv6 packet received during ECM call

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00383 Published 2023-04-04 No fix listed CWE-476
TI-2022-09312 CVE-2022-25737 · GHSA-m6rf-vjjx-jv33

Use of Uninitialized Variable in MODEM

Priority LOW 33

Information disclosure in modem due to missing NULL check while reading packets received from local network

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00354 Published 2023-04-04 No fix listed CWE-457
TI-2022-09306 CVE-2022-25731 · GHSA-mqh7-58mx-6j4v

Incorrect Calculation of Buffer Size in MODEM

Priority LOW 33

Information disclosure in modem due to buffer over-read while processing packets from DNS server

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00354 Published 2023-04-04 No fix listed CWE-131
TI-2022-09305 CVE-2022-25730 · GHSA-xhc7-32vm-6c85

Buffer Over-read in MODEM

Priority MEDIUM 42

Information disclosure in modem due to improper check of IP type while processing DNS server query

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00354 Published 2023-04-04 No fix listed CWE-126
TI-2022-09301 CVE-2022-25726 · GHSA-rfgf-82hw-xm75

Buffer Over-read in MODEM

Priority MEDIUM 42

Information disclosure in modem data due to array out of bound access while handling the incoming DNS response packet

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00354 Published 2023-04-04 No fix listed CWE-126
TI-2022-19243 CVE-2022-40531 · GHSA-5whw-3grx-5f9w

Incorrect type conversion in WLAN

Priority LOW 35

Memory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID message.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00123 Published 2023-03-07 No fix listed CWE-704
TI-2022-14681 CVE-2022-33257 · GHSA-rjfg-3m55-wmp7

Time-of-check time-of-use race condition in Core

Priority MEDIUM 41

Memory corruption in Core due to time-of-check time-of-use race condition during dump collection in trust zone.

CVSS 3.1CRITICAL 9.3 Local No auth No interaction EPSS 0.00087 Published 2023-03-07 No fix listed CWE-367
TI-2022-14641 CVE-2022-33213 · GHSA-jc95-8hq3-w9v4

Memory Corruption in MODEM

Priority MEDIUM 40

Memory corruption in modem due to buffer overflow while processing a PPP packet

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00409 Published 2023-03-07 No fix listed CWE-121
TI-2022-09282 CVE-2022-25705 · GHSA-w9cc-3843-6mhx

Integer Overflow to Buffer Overflow in Modem

Priority LOW 33

Memory corruption in modem due to integer overflow to buffer overflow while handling APDU response

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00125 Published 2023-03-07 No fix listed CWE-680
Load more