Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

518 records

Vendor: Qualcomm Component: Qca6390 Firmware Clear all filters
TI-2021-10798 CVE-2021-30299 · GHSA-g9p5-q86f-758v

Improper Input Validation in Audio

Priority LOW 30

Possible out of bound access in audio module due to lack of validation of user provided input.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00122 Published 2024-11-22 No fix listed CWE-20
TI-2023-16264 CVE-2023-33081 · GHSA-pj8h-cmgw-7xpg

Buffer over-read in WLAN Firmware

Priority LOW 33

Transient DOS while converting TWT (Target Wake Time) frame parameters in the OTA broadcast.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00471 Published 2023-12-05 No fix listed CWE-126
TI-2023-16263 CVE-2023-33080 · GHSA-rh2q-252v-ccqc

Buffer over-read in WLAN Firmware

Priority LOW 39

Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management frame.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00338 Published 2023-12-05 No fix listed CWE-126
TI-2023-16262 CVE-2023-33079 · GHSA-h36p-v4x7-w44w

Use of Out-of-range Pointer Offset in Audio

Priority LOW 33

Memory corruption in Audio while running invalid audio recording from ADSP.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00157 Published 2023-12-05 No fix listed CWE-823
TI-2023-16248 CVE-2023-33063 · GHSA-534v-34xw-2g2m

Use After Free in DSP Services

Priority CRITICAL 93KEV

Memory corruption in DSP Services during a remote call from HLOS to DSP.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00672 Published 2023-12-05 No fix listed CWE-416
TI-2023-16232 CVE-2023-33044 · GHSA-2xgj-p3p2-vx5f

Reachable Assertion in Data Modem

Priority LOW 33

Transient DOS in Data modem while handling TLB control messages from the Network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00515 Published 2023-12-05 No fix listed CWE-617
TI-2023-16230 CVE-2023-33042 · GHSA-m5xw-3jph-chxg

Improper Input Validation in Modem

Priority LOW 34

Transient DOS in Modem after RRC Setup message is received.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00607 Published 2023-12-05 No fix listed CWE-20
TI-2023-16210 CVE-2023-33022 · GHSA-48vm-fq56-767f

Integer Overflow to Buffer Overflow in HLOS

Priority LOW 38

Memory corruption in HLOS while invoking IOCTL calls from user-space.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00159 Published 2023-12-05 No fix listed CWE-680
TI-2023-16205 CVE-2023-33017 · GHSA-xmc3-8wf5-r59w

Buffer Copy Without Checking Size of Input in Boot

Priority LOW 33

Memory corruption in Boot while running a ListVars test in UEFI Menu during boot.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00157 Published 2023-12-05 No fix listed CWE-120
TI-2023-16235 CVE-2023-33047 · GHSA-xq75-p9cv-wvw7

Buffer Over-read in WLAN Firmware

Priority LOW 34

Transient DOS in WLAN Firmware while parsing no-inherit IES.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00534 Published 2023-11-07 No fix listed CWE-126
TI-2023-16215 CVE-2023-33027 · GHSA-hxqc-xv34-842x

Buffer Over-read in WLAN Firmware

Priority LOW 39

Transient DOS in WLAN Firmware while parsing rsn ies.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00387 Published 2023-10-03 No fix listed CWE-126
TI-2023-13102 CVE-2023-28571 · GHSA-q2gh-hfh3-q82q

Buffer Over-read in WLAN HOST

Priority LOW 26

Information disclosure in WLAN HOST while processing the WLAN scan descriptor list during roaming scan.

CVSS 3.1MEDIUM 6.1 Local Low privileges No interaction EPSS 0.00113 Published 2023-10-03 No fix listed CWE-126
TI-2023-13072 CVE-2023-28540 · GHSA-fmqm-mv4m-4vh3

Improper Authentication in Data Modem

Priority MEDIUM 48

Cryptographic issue in Data Modem due to improper authentication during TLS handshake.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00431 Published 2023-10-03 No fix listed CWE-287
TI-2023-08055 CVE-2023-21667 · GHSA-p54g-g6xw-2jm9

Buffer Over-read in Bluetooth HOST

Priority LOW 29

Transient DOS in Bluetooth HOST while passing descriptor to validate the blacklisted BT keyboard.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0037 Published 2023-09-05 No fix listed CWE-126
Load more