Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

244 records

TI-2021-10798 CVE-2021-30299 · GHSA-g9p5-q86f-758v

Improper Input Validation in Audio

Priority LOW 30

Possible out of bound access in audio module due to lack of validation of user provided input.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00122 Published 2024-11-22 No fix listed CWE-20
TI-2023-16239 CVE-2023-33054 · GHSA-9v76-xcm4-wwhw

Improper Authentication in GPS HLOS Driver

Priority LOW 39

Cryptographic issue in GPS HLOS Driver while downloading Qualcomm GNSS assistance data.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00361 Published 2023-12-05 No fix listed CWE-287
TI-2023-16210 CVE-2023-33022 · GHSA-48vm-fq56-767f

Integer Overflow to Buffer Overflow in HLOS

Priority LOW 38

Memory corruption in HLOS while invoking IOCTL calls from user-space.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00159 Published 2023-12-05 No fix listed CWE-680
TI-2023-16215 CVE-2023-33027 · GHSA-hxqc-xv34-842x

Buffer Over-read in WLAN Firmware

Priority LOW 39

Transient DOS in WLAN Firmware while parsing rsn ies.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00387 Published 2023-10-03 No fix listed CWE-126
TI-2023-13069 CVE-2023-28537 · GHSA-hwh2-grqv-74jx

Integer Overflow or Wraparound in Audio

Priority LOW 35

Memory corruption while allocating memory in COmxApeDec module in Audio.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00116 Published 2023-08-08 No fix listed CWE-190
TI-2023-08039 CVE-2023-21651 · GHSA-99gr-hqgx-r784

Incorrect Type Conversion or Cast in Core

Priority MEDIUM 41

Memory Corruption in Core due to incorrect type conversion or cast in secure_io_read/write function in TEE.

CVSS 3.1CRITICAL 9.3 Local No auth No interaction EPSS 0.00116 Published 2023-08-08 No fix listed CWE-704
TI-2023-08015 CVE-2023-21626 · GHSA-mx82-492r-vjvf

Improper Authentication in HLOS.

Priority LOW 32

Cryptographic issue in HLOS due to improper authentication while performing key velocity checks using more than one key.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00109 Published 2023-08-08 No fix listed CWE-320
Priority MEDIUM 43

Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00427 Published 2023-08-08 No fix listed CWE-457
TI-2022-19221 CVE-2022-40504 · GHSA-xgf4-6mjg-7hqq

Reachable assertion in Modem

Priority LOW 33

Transient DOS due to reachable assertion in Modem when UE received Downlink Data Indication message from the network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00383 Published 2023-05-02 No fix listed CWE-617
Priority LOW 31

Information disclosure due to buffer over-read in Trusted Execution Environment while QRKS report generation.

CVSS 3.1HIGH 7.3 Local Low privileges No interaction EPSS 0.0012 Published 2023-05-02 No fix listed CWE-126
TI-2022-19244 CVE-2022-40532 · GHSA-767v-xrqh-x67m

Integer overflow or wraparound in WLAN

Priority LOW 35

Memory corruption due to integer overflow or wraparound in WLAN while sending WMI cmd from host to target.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00116 Published 2023-04-04 No fix listed CWE-190
Priority LOW 33

Memory corruption due to improper validation of array index in User Identity Module when APN TLV length is greater than command length.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00118 Published 2023-04-04 No fix listed CWE-129
TI-2022-14717 CVE-2022-33296 · GHSA-wmfr-hvpj-h75h

Integer overflow to buffer overflow in Modem

Priority LOW 33

Memory corruption due to integer overflow to buffer overflow in Modem while parsing Traffic Channel Neighbor List Update message.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00115 Published 2023-04-04 No fix listed CWE-680
TI-2022-14711 CVE-2022-33289 · GHSA-qgph-86jf-wcq5

Improper validation of array index in Modem

Priority LOW 31

Memory corruption occurs in Modem due to improper validation of array index when malformed APDU is sent from card.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00186 Published 2023-04-04 No fix listed CWE-129
Priority LOW 39

Memory corruption due to buffer copy without checking the size of input in Core while sending SCM command to get write protection information.

CVSS 3.1CRITICAL 9.3 Local No auth No interaction EPSS 0.00118 Published 2023-04-04 No fix listed CWE-120
TI-2022-14691 CVE-2022-33269 · GHSA-6f6p-f4c4-22jj

Integer overflow or wraparound in Core

Priority LOW 39

Memory corruption due to integer overflow or wraparound in Core while DDR memory assignment.

CVSS 3.1CRITICAL 9.3 Local No auth No interaction EPSS 0.00116 Published 2023-04-04 No fix listed CWE-190
TI-2022-14658 CVE-2022-33231 · GHSA-h9v3-m6cc-qpv3

Double free in Core

Priority LOW 39

Memory corruption due to double free in core while initializing the encryption key.

CVSS 3.1CRITICAL 9.3 Local No auth No interaction EPSS 0.0008 Published 2023-04-04 No fix listed CWE-415
TI-2022-19243 CVE-2022-40531 · GHSA-5whw-3grx-5f9w

Incorrect type conversion in WLAN

Priority LOW 35

Memory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID message.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00123 Published 2023-03-07 No fix listed CWE-704
Priority MEDIUM 41

Memory corruption in Core due to time-of-check time-of-use race condition during dump collection in trust zone.

CVSS 3.1CRITICAL 9.3 Local No auth No interaction EPSS 0.00087 Published 2023-03-07 No fix listed CWE-367
TI-2022-14668 CVE-2022-33242 · GHSA-5775-77jw-fpqx

Improper authentication in Qualcomm IPC

Priority LOW 35

Memory corruption due to improper authentication in Qualcomm IPC while loading unsigned lib in audio PD.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00141 Published 2023-03-07 No fix listed CWE-287
TI-2022-14641 CVE-2022-33213 · GHSA-jc95-8hq3-w9v4

Memory Corruption in MODEM

Priority MEDIUM 40

Memory corruption in modem due to buffer overflow while processing a PPP packet

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00409 Published 2023-03-07 No fix listed CWE-121
Load more