Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

461 records

TI-2026-17287 CVE-2026-21385 · GHSA-wwwq-962j-m7x8

Integer Overflow or Wraparound in Graphics

Priority CRITICAL 93KEV

Memory corruption while using alignments for memory allocation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01316 Published 2026-03-02 No fix listed CWE-190
TI-2025-29895 CVE-2025-47383 · GHSA-mrhm-mr9g-wpx6

Missing Cryptographic Step in Data Modem

Priority LOW 33

Weak configuration may lead to cryptographic issue when a VoWiFi call is triggered from UE.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00146 Published 2026-03-02 No fix listed CWE-325
TI-2025-29845 CVE-2025-47333 · GHSA-x98j-9gfh-hpwf

Use After Free in HLOS

Priority LOW 28

Memory corruption while handling buffer mapping operations in the cryptographic driver.

CVSS 3.1MEDIUM 6.6 Local Low privileges No interaction EPSS 0.00078 Published 2026-01-06 No fix listed CWE-416
TI-2025-29832 CVE-2025-47320 · GHSA-25c8-fq6j-8vvf

Out-of-bounds Write in Audio

Priority LOW 35

Memory corruption while processing MFC channel configuration during music playback.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00081 Published 2025-12-18 No fix listed CWE-787
TI-2025-19923 CVE-2025-27053 · GHSA-jgwx-g3h6-cg8j

Incorrect Calculation of Buffer Size in HLOS

Priority LOW 35

Memory corruption during PlayReady APP usecase while processing TA commands.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00089 Published 2025-10-09 No fix listed CWE-131
Priority MEDIUM 41

Information disclosure while decoding this RTP packet headers received by UE from the network when the padding bit is set.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00274 Published 2025-09-24 No fix listed CWE-126
Priority MEDIUM 41

Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00269 Published 2025-09-24 No fix listed CWE-126
Priority MEDIUM 41

Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00269 Published 2025-09-24 No fix listed CWE-126
TI-2025-15443 CVE-2025-21482 · GHSA-mv3f-wvhc-h8hg

Cryptographic Issues in Core

Priority LOW 32

Cryptographic issue while performing RSA PKCS padding decoding.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00087 Published 2025-09-24 No fix listed CWE-310
TI-2025-15397 CVE-2025-21433 · GHSA-28jm-h53g-x4fr

NULL Pointer Dereference in SPS-HLOS

Priority LOW 26

Transient DOS when importing a PKCS#8-encoded RSA private key with a zero-sized modulus.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00086 Published 2025-07-08 No fix listed CWE-476
TI-2025-15391 CVE-2025-21427 · GHSA-3x8c-g2gj-p9rg

Buffer Over-read in Data HLOS - LNX

Priority MEDIUM 41

Information disclosure while decoding this RTP packet Payload when UE receives the RTP packet from the network.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00245 Published 2025-07-08 No fix listed CWE-126
Priority MEDIUM 41

Information disclosure when an invalid RTCP packet is received during a VoLTE/VoWiFi IMS call.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00308 Published 2025-06-03 No fix listed CWE-126
Priority MEDIUM 41

Information disclosure may occur while decoding the RTP packet with invalid header extension from network.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00255 Published 2025-06-03 No fix listed CWE-126
Priority MEDIUM 41

Information disclosure may occur while decoding the RTP packet with improper header length for number of contributing sources.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00255 Published 2025-06-03 No fix listed CWE-126
TI-2024-35493 CVE-2024-53015 · GHSA-8fjc-wgpp-8px6

Use After Free in Computer Vision

Priority LOW 28

Memory corruption while processing IOCTL command to handle buffers associated with a session.

CVSS 3.1MEDIUM 6.6 Local Low privileges No interaction EPSS 0.00097 Published 2025-06-03 No fix listed CWE-416
Priority LOW 28

Memory corruption may occur while processing voice call registration with user.

CVSS 3.1MEDIUM 6.6 Local Low privileges No interaction EPSS 0.00097 Published 2025-06-03 No fix listed CWE-120
Priority LOW 38

Transient DOS while processing of a registration acceptance OTA due to incorrect ciphering key data IE.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00262 Published 2025-05-06 No fix listed CWE-126
Load more