Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

348 records

Vendor: Qualcomm Component: Sm8150 Firmware Clear all filters
TI-2023-16263 CVE-2023-33080 · GHSA-rh2q-252v-ccqc

Buffer over-read in WLAN Firmware

Priority LOW 39

Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management frame.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00338 Published 2023-12-05 No fix listed CWE-126
TI-2023-16255 CVE-2023-33070 · GHSA-9cq4-qvx2-f3hh

Improper Authentication in Automotive OS

Priority MEDIUM 64

Transient DOS in Automotive OS due to improper authentication to the secure IO calls.

CVSS 3.1HIGH 7.1 Local No auth No interaction EPSS 0.00141 Published 2023-12-05 No fix listed CWE-287
TI-2023-16248 CVE-2023-33063 · GHSA-534v-34xw-2g2m

Use After Free in DSP Services

Priority CRITICAL 93KEV

Memory corruption in DSP Services during a remote call from HLOS to DSP.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00672 Published 2023-12-05 No fix listed CWE-416
TI-2023-16239 CVE-2023-33054 · GHSA-9v76-xcm4-wwhw

Improper Authentication in GPS HLOS Driver

Priority LOW 39

Cryptographic issue in GPS HLOS Driver while downloading Qualcomm GNSS assistance data.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00361 Published 2023-12-05 No fix listed CWE-287
TI-2023-16210 CVE-2023-33022 · GHSA-48vm-fq56-767f

Integer Overflow to Buffer Overflow in HLOS

Priority LOW 38

Memory corruption in HLOS while invoking IOCTL calls from user-space.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00159 Published 2023-12-05 No fix listed CWE-680
TI-2023-16205 CVE-2023-33017 · GHSA-xmc3-8wf5-r59w

Buffer Copy Without Checking Size of Input in Boot

Priority LOW 33

Memory corruption in Boot while running a ListVars test in UEFI Menu during boot.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00157 Published 2023-12-05 No fix listed CWE-120
TI-2023-16240 CVE-2023-33055 · GHSA-xvfh-vpm8-j2fh

Buffer Copy Without Checking Size of Input in Audio

Priority LOW 35

Memory Corruption in Audio while invoking callback function in driver from ADSP.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00154 Published 2023-11-07 No fix listed CWE-120
TI-2023-16215 CVE-2023-33027 · GHSA-hxqc-xv34-842x

Buffer Over-read in WLAN Firmware

Priority LOW 39

Transient DOS in WLAN Firmware while parsing rsn ies.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00387 Published 2023-10-03 No fix listed CWE-126
TI-2023-13072 CVE-2023-28540 · GHSA-fmqm-mv4m-4vh3

Improper Authentication in Data Modem

Priority MEDIUM 48

Cryptographic issue in Data Modem due to improper authentication during TLS handshake.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00431 Published 2023-10-03 No fix listed CWE-287
TI-2022-14697 CVE-2022-33275 · GHSA-jv4q-hvqc-9497

Improper validation of array index in WLAN HAL

Priority LOW 37

Memory corruption due to improper validation of array index in WLAN HAL when received lm_itemNum is out of range.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00116 Published 2023-09-05 No fix listed CWE-129
TI-2023-08057 CVE-2023-21670 · GHSA-w2x2-g32p-v8fp

Improper Access control in GPU Subsystem

Priority LOW 35

Memory Corruption in GPU Subsystem due to arbitrary command execution from GPU in privileged mode.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00116 Published 2023-06-06 No fix listed CWE-284
TI-2023-08056 CVE-2023-21669 · GHSA-4hc8-554p-pqq5

Buffer Over-read in WLAN HOST

Priority MEDIUM 42

Information Disclosure in WLAN HOST while sending DPP action frame to peer with an invalid source address.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00354 Published 2023-06-06 No fix listed CWE-126
TI-2023-08047 CVE-2023-21659 · GHSA-pggh-8r27-x766

Buffer Over-read in WLAN Firmware

Priority LOW 33

Transient DOS in WLAN Firmware while processing frames with missing header fields.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00383 Published 2023-06-06 No fix listed CWE-126
TI-2022-19248 CVE-2022-40536 · GHSA-jrg7-q7cg-93r8

Improper authentication in Modem

Priority LOW 39

Transient DOS due to improper authentication in modem while receiving plain TLB OTA request message from network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00399 Published 2023-06-06 No fix listed CWE-285
TI-2022-19241 CVE-2022-40529 · GHSA-h382-3gxp-25cx

Improper access control in Kernel

Priority LOW 33

Memory corruption due to improper access control in kernel while processing a mapping request from root process.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00095 Published 2023-06-06 No fix listed CWE-284
TI-2022-19237 CVE-2022-40523 · GHSA-rwgh-9h84-fcv3

Information exposure in Kernel

Priority LOW 30

Information disclosure in Kernel due to indirect branch misprediction.

CVSS 3.1HIGH 7.1 Local No auth No interaction EPSS 0.00113 Published 2023-06-06 No fix listed CWE-200
TI-2022-19235 CVE-2022-40521 · GHSA-8f4c-mxmx-gjgv

Improper authorization in Modem

Priority LOW 33

Transient DOS due to improper authorization in Modem

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00354 Published 2023-06-06 No fix listed CWE-285
TI-2022-19223 CVE-2022-40507 · GHSA-wcg5-6pc8-hjf5

Double free in Core

Priority MEDIUM 41

Memory corruption due to double free in Core while mapping HLOS address to the list.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.01305 Published 2023-06-06 No fix listed CWE-415
TI-2022-14728 CVE-2022-33307 · GHSA-fvvc-c9xj-45fv

Double free in Automotive

Priority LOW 37

Memory Corruption due to double free in automotive when a bad HLOS address for one of the lists to be mapped is passed.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00116 Published 2023-06-06 No fix listed CWE-415
Load more