Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

336 records

Vendor: Qualcomm Component: Sd888 5g Firmware Clear all filters
TI-2021-10798 CVE-2021-30299 · GHSA-g9p5-q86f-758v

Improper Input Validation in Audio

Priority LOW 30

Possible out of bound access in audio module due to lack of validation of user provided input.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00122 Published 2024-11-22 No fix listed CWE-20
TI-2023-08043 CVE-2023-21655 · GHSA-cqww-fvwv-8hfg

Integer Overflow or Wraparound in Display

Priority LOW 35

Memory corruption in Audio while validating and mapping metadata.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00115 Published 2023-09-05 No fix listed CWE-190
TI-2023-08034 CVE-2023-21646 · GHSA-g2g3-xc9m-vr7r

Reachable Assertion in Modem

Priority LOW 39

Transient DOS in Modem while processing invalid System Information Block 1.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00383 Published 2023-09-05 No fix listed CWE-617
TI-2022-14647 CVE-2022-33220 · GHSA-367p-mrph-mgh2

Buffer over-read in Automotive multimedia

Priority LOW 24

Information disclosure in Automotive multimedia due to buffer over-read.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00112 Published 2023-09-05 No fix listed CWE-126
TI-2023-08841 CVE-2023-22666 · GHSA-jmmv-6pvw-x59r

Integer Overflow or Wraparound in Audio

Priority LOW 35

Memory Corruption in Audio while playing amrwbplus clips with modified content.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00116 Published 2023-08-08 No fix listed CWE-190
TI-2023-08040 CVE-2023-21652 · GHSA-83q9-jh53-rrr4

Key Management Errors in HLOS

Priority LOW 34

Cryptographic issue in HLOS as derived keys used to encrypt/decrypt information is present on stack after use.

CVSS 3.1HIGH 7.7 Local No auth No interaction EPSS 0.001 Published 2023-08-08 No fix listed CWE-320
TI-2023-08039 CVE-2023-21651 · GHSA-99gr-hqgx-r784

Incorrect Type Conversion or Cast in Core

Priority MEDIUM 41

Memory Corruption in Core due to incorrect type conversion or cast in secure_io_read/write function in TEE.

CVSS 3.1CRITICAL 9.3 Local No auth No interaction EPSS 0.00116 Published 2023-08-08 No fix listed CWE-704
TI-2023-08015 CVE-2023-21626 · GHSA-mx82-492r-vjvf

Improper Authentication in HLOS.

Priority LOW 32

Cryptographic issue in HLOS due to improper authentication while performing key velocity checks using more than one key.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00109 Published 2023-08-08 No fix listed CWE-320
TI-2022-19225 CVE-2022-40510 · GHSA-6f27-8674-h7p8

Buffer copy without checking size of input in Audio.

Priority MEDIUM 43

Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00427 Published 2023-08-08 No fix listed CWE-457
TI-2022-19249 CVE-2022-40537 · GHSA-7mvh-wrx9-f9mm

Improper Validation of Array Index in Bluetooth HOST

Priority MEDIUM 42

Memory corruption in Bluetooth HOST while processing the AVRC_PDU_GET_PLAYER_APP_VALUE_TEXT AVRCP response.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00364 Published 2023-03-07 No fix listed CWE-129
TI-2022-19243 CVE-2022-40531 · GHSA-5whw-3grx-5f9w

Incorrect type conversion in WLAN

Priority LOW 35

Memory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID message.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00123 Published 2023-03-07 No fix listed CWE-704
TI-2022-19242 CVE-2022-40530 · GHSA-j83q-whgg-hfg9

Integer overflow to buffer overflow in WLAN

Priority LOW 35

Memory corruption in WLAN due to integer overflow to buffer overflow in WLAN during initialization phase.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00125 Published 2023-03-07 No fix listed CWE-680
TI-2022-19240 CVE-2022-40527 · GHSA-4grg-rgmh-vh43

Reachable Assertion in WLAN Embedded SW

Priority LOW 39

Transient DOS due to reachable assertion in WLAN while processing PEER ID populated by TQM.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00406 Published 2023-03-07 No fix listed CWE-617
TI-2022-19229 CVE-2022-40515 · GHSA-g5q2-299m-wxw3

Double free in Video

Priority MEDIUM 48

Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00326 Published 2023-03-07 No fix listed CWE-415
TI-2022-14700 CVE-2022-33278 · GHSA-gv5v-q9vq-26q4

Buffer copy without checking the size of input in HLOS

Priority LOW 35

Memory corruption due to buffer copy without checking the size of input in HLOS when input message size is larger than the buffer capacity.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00123 Published 2023-03-07 No fix listed CWE-120
TI-2022-14694 CVE-2022-33272 · GHSA-mqq2-qpfr-q5vc

Reachable assertion in Modem

Priority LOW 33

Transient DOS in modem due to reachable assertion.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00406 Published 2023-03-07 No fix listed CWE-617
TI-2022-14684 CVE-2022-33260 · GHSA-6grp-q32c-2hr4

Stack based buffer overflow in Core

Priority LOW 33

Memory corruption due to stack based buffer overflow in core while sending command from USB of large size.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00122 Published 2023-03-07 No fix listed CWE-121
TI-2022-14681 CVE-2022-33257 · GHSA-rjfg-3m55-wmp7

Time-of-check time-of-use race condition in Core

Priority MEDIUM 41

Memory corruption in Core due to time-of-check time-of-use race condition during dump collection in trust zone.

CVSS 3.1CRITICAL 9.3 Local No auth No interaction EPSS 0.00087 Published 2023-03-07 No fix listed CWE-367
TI-2022-14678 CVE-2022-33254 · GHSA-jwgc-3g48-rwwr

Reachable assertion in Modem

Priority LOW 39

Transient DOS due to reachable assertion in Modem while processing SIB1 Message.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00406 Published 2023-03-07 No fix listed CWE-617
Load more