Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

707 records

TI-2025-29832 CVE-2025-47320 · GHSA-25c8-fq6j-8vvf

Out-of-bounds Write in Audio

Priority LOW 35

Memory corruption while processing MFC channel configuration during music playback.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00081 Published 2025-12-18 No fix listed CWE-787
TI-2025-19923 CVE-2025-27053 · GHSA-jgwx-g3h6-cg8j

Incorrect Calculation of Buffer Size in HLOS

Priority LOW 35

Memory corruption during PlayReady APP usecase while processing TA commands.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00089 Published 2025-10-09 No fix listed CWE-131
TI-2025-29830 CVE-2025-47318 · GHSA-xrpv-r5rq-cxjp

Buffer Over-read in BT Controller

Priority LOW 38

Transient DOS while parsing the EPTM test control message to get the test pattern.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00217 Published 2025-09-24 No fix listed CWE-126
Priority MEDIUM 41

Information disclosure while decoding this RTP packet headers received by UE from the network when the padding bit is set.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00274 Published 2025-09-24 No fix listed CWE-126
Priority MEDIUM 41

Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00269 Published 2025-09-24 No fix listed CWE-126
Priority MEDIUM 41

Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00269 Published 2025-09-24 No fix listed CWE-126
TI-2025-15443 CVE-2025-21482 · GHSA-mv3f-wvhc-h8hg

Cryptographic Issues in Core

Priority LOW 32

Cryptographic issue while performing RSA PKCS padding decoding.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00087 Published 2025-09-24 No fix listed CWE-310
Priority LOW 35

Memory corruption while handling client exceptions, allowing unauthorized channel access.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0009 Published 2025-08-06 No fix listed CWE-284
TI-2025-15391 CVE-2025-21427 · GHSA-3x8c-g2gj-p9rg

Buffer Over-read in Data HLOS - LNX

Priority MEDIUM 41

Information disclosure while decoding this RTP packet Payload when UE receives the RTP packet from the network.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00245 Published 2025-07-08 No fix listed CWE-126
Priority MEDIUM 41

Information disclosure when an invalid RTCP packet is received during a VoLTE/VoWiFi IMS call.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00308 Published 2025-06-03 No fix listed CWE-126
Priority MEDIUM 41

Information disclosure may occur while decoding the RTP packet with invalid header extension from network.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00255 Published 2025-06-03 No fix listed CWE-126
Priority LOW 28

Memory corruption may occur while processing voice call registration with user.

CVSS 3.1MEDIUM 6.6 Local Low privileges No interaction EPSS 0.00097 Published 2025-06-03 No fix listed CWE-120
TI-2024-30585 CVE-2024-45562 · GHSA-pwhf-2f22-mf2p

Use After Free in HLOS

Priority LOW 33

Memory corruption during concurrent access to server info object due to unprotected critical field.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00112 Published 2025-05-06 No fix listed CWE-416
TI-2025-15394 CVE-2025-21430 · GHSA-c8ww-p8qh-gjr8

Buffer Over-read in WLAN Host

Priority MEDIUM 40

Transient DOS while connecting STA to AP and initiating ADD TS request from AP to establish TSpec session.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00267 Published 2025-04-07 No fix listed CWE-126
TI-2025-15393 CVE-2025-21429 · GHSA-mrr6-w84f-5xh8

Buffer Over-read in WLAN Host

Priority MEDIUM 40

Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00267 Published 2025-04-07 No fix listed CWE-126
TI-2025-15392 CVE-2025-21428 · GHSA-4rmv-m7cx-wvg4

Buffer Over-read in WLAN Host

Priority MEDIUM 40

Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request from the AP to establish a TSpec session.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00263 Published 2025-04-07 No fix listed CWE-126
Priority MEDIUM 41

Information disclosure may occur during a video call if a device resets due to a non-conforming RTCP packet that doesn`t adhere to RFC standards.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00272 Published 2025-04-07 No fix listed CWE-126
TI-2024-30567 CVE-2024-45543 · GHSA-7h9m-rpxw-5xf6

Out-of-bounds Write in Audio

Priority LOW 28

Memory corruption while accessing MSM channel map and mixer functions.

CVSS 3.1MEDIUM 6.6 Local Low privileges No interaction EPSS 0.00112 Published 2025-04-07 No fix listed CWE-787
TI-2024-25676 CVE-2024-38426 · GHSA-24vm-48r8-7jq6

Improper Authentication in Modem

Priority LOW 24

While processing the authentication message in UE, improper authentication may lead to information disclosure.

CVSS 3.1MEDIUM 5.4 Adjacent network No auth No interaction EPSS 0.0027 Published 2025-03-03 No fix listed CWE-287
TI-2024-25666 CVE-2024-38416 · GHSA-c28f-6hfg-ffcc

Buffer Over-read in Audio

Priority LOW 26

Information disclosure during audio playback.

CVSS 3.1MEDIUM 6.1 Local Low privileges No interaction EPSS 0.00101 Published 2025-02-03 No fix listed CWE-126
Load more