Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

226 records

TI-2023-13075 CVE-2023-28543 · GHSA-4vjq-2vfw-7vfp

Out of Bounds read in SNPE Library

Priority MEDIUM 43

A malformed DLC can trigger Memory Corruption in SNPE library due to out of bounds read, such as by loading an untrusted model (e.g.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00364 Published 2023-09-05 No fix listed CWE-125
TI-2023-13070 CVE-2023-28538 · GHSA-w7wm-wchq-gc2x

Stack-based Buffer Overflow in WIN Product

Priority LOW 37

Memory corruption in WIN Product while invoking WinAcpi update driver in the UEFI region.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00116 Published 2023-09-05 No fix listed CWE-121
TI-2023-13069 CVE-2023-28537 · GHSA-hwh2-grqv-74jx

Integer Overflow or Wraparound in Audio

Priority LOW 35

Memory corruption while allocating memory in COmxApeDec module in Audio.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00116 Published 2023-08-08 No fix listed CWE-190
TI-2023-08841 CVE-2023-22666 · GHSA-jmmv-6pvw-x59r

Integer Overflow or Wraparound in Audio

Priority LOW 35

Memory Corruption in Audio while playing amrwbplus clips with modified content.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00116 Published 2023-08-08 No fix listed CWE-190
TI-2023-08039 CVE-2023-21651 · GHSA-99gr-hqgx-r784

Incorrect Type Conversion or Cast in Core

Priority MEDIUM 41

Memory Corruption in Core due to incorrect type conversion or cast in secure_io_read/write function in TEE.

CVSS 3.1CRITICAL 9.3 Local No auth No interaction EPSS 0.00116 Published 2023-08-08 No fix listed CWE-704
TI-2023-08015 CVE-2023-21626 · GHSA-mx82-492r-vjvf

Improper Authentication in HLOS.

Priority LOW 32

Cryptographic issue in HLOS due to improper authentication while performing key velocity checks using more than one key.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00109 Published 2023-08-08 No fix listed CWE-320
Priority MEDIUM 43

Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00427 Published 2023-08-08 No fix listed CWE-457
Priority MEDIUM 42

Memory corruption in Bluetooth HOST while processing the AVRC_PDU_GET_PLAYER_APP_VALUE_TEXT AVRCP response.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00364 Published 2023-03-07 No fix listed CWE-129
TI-2022-19243 CVE-2022-40531 · GHSA-5whw-3grx-5f9w

Incorrect type conversion in WLAN

Priority LOW 35

Memory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID message.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00123 Published 2023-03-07 No fix listed CWE-704
TI-2022-19229 CVE-2022-40515 · GHSA-g5q2-299m-wxw3

Double free in Video

Priority MEDIUM 48

Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00326 Published 2023-03-07 No fix listed CWE-415
Priority MEDIUM 41

Memory corruption in Core due to time-of-check time-of-use race condition during dump collection in trust zone.

CVSS 3.1CRITICAL 9.3 Local No auth No interaction EPSS 0.00087 Published 2023-03-07 No fix listed CWE-367
TI-2022-14641 CVE-2022-33213 · GHSA-jc95-8hq3-w9v4

Memory Corruption in MODEM

Priority MEDIUM 40

Memory corruption in modem due to buffer overflow while processing a PPP packet

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00409 Published 2023-03-07 No fix listed CWE-121
TI-2022-09282 CVE-2022-25705 · GHSA-w9cc-3843-6mhx

Integer Overflow to Buffer Overflow in Modem

Priority LOW 33

Memory corruption in modem due to integer overflow to buffer overflow while handling APDU response

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00125 Published 2023-03-07 No fix listed CWE-680
TI-2022-09276 CVE-2022-25694 · GHSA-rx6m-wjqw-383g

Use of Out-of-range Pointer Offset in MODEM

Priority LOW 37

Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00123 Published 2023-03-07 No fix listed CWE-823
TI-2022-06422 CVE-2022-22075 · GHSA-wjfr-whqg-q776

Information Exposure in Graphics

Priority LOW 26

Information Disclosure in Graphics during GPU context switch.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.0012 Published 2023-03-07 No fix listed CWE-200
Priority MEDIUM 43

Memory corruption due to buffer copy without checking the size of input in WLAN Firmware while processing CCKM IE in reassoc response frame.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00475 Published 2023-02-09 No fix listed CWE-120
TI-2022-19226 CVE-2022-40512 · GHSA-h9wv-r3fw-4xhh

Buffer over-read in WLAN Firmware.

Priority LOW 39

Transient DOS in WLAN Firmware due to buffer over-read while processing probe response or beacon.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00424 Published 2023-02-09 No fix listed CWE-126
Priority LOW 35

Memory corruption in modem due to buffer copy without checking size of input while receiving WMI command.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00123 Published 2023-02-09 No fix listed CWE-120
TI-2022-14693 CVE-2022-33271 · GHSA-r6x6-vqh9-prpr

Buffer over-read in WLAN

Priority MEDIUM 42

Information disclosure due to buffer over-read in WLAN while parsing NMF frame.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00375 Published 2023-02-09 No fix listed CWE-126
Priority LOW 33

Memory corruption in User Identity Module due to integer overflow to buffer overflow when a segement is received via qmi http.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00125 Published 2023-02-09 No fix listed CWE-680
TI-2022-14669 CVE-2022-33243 · GHSA-2269-968q-6hcq

Improper access control in Qualcomm IPC

Priority LOW 35

Memory corruption due to improper access control in Qualcomm IPC.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00107 Published 2023-02-09 No fix listed CWE-284
TI-2022-14660 CVE-2022-33233 · GHSA-q3j4-865v-r93h

Configuration weakness in modem

Priority LOW 33

Memory corruption due to configuration weakness in modem wile sending command to write protected files.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00123 Published 2023-02-09 No fix listed CWE-16
Load more