Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

252 records

Vendor: Qualcomm Component: Sm8250 Firmware Clear all filters
TI-2023-16264 CVE-2023-33081 · GHSA-pj8h-cmgw-7xpg

Buffer over-read in WLAN Firmware

Priority LOW 33

Transient DOS while converting TWT (Target Wake Time) frame parameters in the OTA broadcast.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00471 Published 2023-12-05 No fix listed CWE-126
TI-2023-16263 CVE-2023-33080 · GHSA-rh2q-252v-ccqc

Buffer over-read in WLAN Firmware

Priority LOW 39

Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management frame.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00338 Published 2023-12-05 No fix listed CWE-126
TI-2023-16262 CVE-2023-33079 · GHSA-h36p-v4x7-w44w

Use of Out-of-range Pointer Offset in Audio

Priority LOW 33

Memory corruption in Audio while running invalid audio recording from ADSP.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00157 Published 2023-12-05 No fix listed CWE-823
TI-2023-16239 CVE-2023-33054 · GHSA-9v76-xcm4-wwhw

Improper Authentication in GPS HLOS Driver

Priority LOW 39

Cryptographic issue in GPS HLOS Driver while downloading Qualcomm GNSS assistance data.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00361 Published 2023-12-05 No fix listed CWE-287
TI-2023-16232 CVE-2023-33044 · GHSA-2xgj-p3p2-vx5f

Reachable Assertion in Data Modem

Priority LOW 33

Transient DOS in Data modem while handling TLB control messages from the Network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00515 Published 2023-12-05 No fix listed CWE-617
TI-2023-16230 CVE-2023-33042 · GHSA-m5xw-3jph-chxg

Improper Input Validation in Modem

Priority LOW 34

Transient DOS in Modem after RRC Setup message is received.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00607 Published 2023-12-05 No fix listed CWE-20
TI-2023-16210 CVE-2023-33022 · GHSA-48vm-fq56-767f

Integer Overflow to Buffer Overflow in HLOS

Priority LOW 38

Memory corruption in HLOS while invoking IOCTL calls from user-space.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00159 Published 2023-12-05 No fix listed CWE-680
TI-2023-16205 CVE-2023-33017 · GHSA-xmc3-8wf5-r59w

Buffer Copy Without Checking Size of Input in Boot

Priority LOW 33

Memory corruption in Boot while running a ListVars test in UEFI Menu during boot.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00157 Published 2023-12-05 No fix listed CWE-120
TI-2023-16240 CVE-2023-33055 · GHSA-xvfh-vpm8-j2fh

Buffer Copy Without Checking Size of Input in Audio

Priority LOW 35

Memory Corruption in Audio while invoking callback function in driver from ADSP.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00154 Published 2023-11-07 No fix listed CWE-120
TI-2023-16235 CVE-2023-33047 · GHSA-xq75-p9cv-wvw7

Buffer Over-read in WLAN Firmware

Priority LOW 34

Transient DOS in WLAN Firmware while parsing no-inherit IES.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00534 Published 2023-11-07 No fix listed CWE-126
TI-2023-16215 CVE-2023-33027 · GHSA-hxqc-xv34-842x

Buffer Over-read in WLAN Firmware

Priority LOW 39

Transient DOS in WLAN Firmware while parsing rsn ies.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00387 Published 2023-10-03 No fix listed CWE-126
TI-2023-16214 CVE-2023-33026 · GHSA-h89f-5h94-vmj5

Buffer over-read in WLAN Firmware

Priority LOW 39

Transient DOS in WLAN Firmware while parsing a NAN management frame.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00387 Published 2023-10-03 No fix listed CWE-126
TI-2023-13102 CVE-2023-28571 · GHSA-q2gh-hfh3-q82q

Buffer Over-read in WLAN HOST

Priority LOW 26

Information disclosure in WLAN HOST while processing the WLAN scan descriptor list during roaming scan.

CVSS 3.1MEDIUM 6.1 Local Low privileges No interaction EPSS 0.00113 Published 2023-10-03 No fix listed CWE-126
TI-2023-13072 CVE-2023-28540 · GHSA-fmqm-mv4m-4vh3

Improper Authentication in Data Modem

Priority MEDIUM 48

Cryptographic issue in Data Modem due to improper authentication during TLS handshake.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00431 Published 2023-10-03 No fix listed CWE-287
TI-2022-14697 CVE-2022-33275 · GHSA-jv4q-hvqc-9497

Improper validation of array index in WLAN HAL

Priority LOW 37

Memory corruption due to improper validation of array index in WLAN HAL when received lm_itemNum is out of range.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00116 Published 2023-09-05 No fix listed CWE-129
TI-2023-08057 CVE-2023-21670 · GHSA-w2x2-g32p-v8fp

Improper Access control in GPU Subsystem

Priority LOW 35

Memory Corruption in GPU Subsystem due to arbitrary command execution from GPU in privileged mode.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00116 Published 2023-06-06 No fix listed CWE-284
TI-2023-08056 CVE-2023-21669 · GHSA-4hc8-554p-pqq5

Buffer Over-read in WLAN HOST

Priority MEDIUM 42

Information Disclosure in WLAN HOST while sending DPP action frame to peer with an invalid source address.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00354 Published 2023-06-06 No fix listed CWE-126
TI-2023-08049 CVE-2023-21661 · GHSA-qcvh-ffq5-55f3

Buffer Over-read in WLAN Firmware

Priority LOW 39

Transient DOS while parsing WLAN beacon or probe-response frame.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00383 Published 2023-06-06 No fix listed CWE-126
TI-2023-08047 CVE-2023-21659 · GHSA-pggh-8r27-x766

Buffer Over-read in WLAN Firmware

Priority LOW 33

Transient DOS in WLAN Firmware while processing frames with missing header fields.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00383 Published 2023-06-06 No fix listed CWE-126
TI-2023-08046 CVE-2023-21658 · GHSA-w8vw-44wp-qv75

Buffer Over-Read in WLAN Firmware

Priority LOW 39

Transient DOS in WLAN Firmware while processing the received beacon or probe response frame.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00383 Published 2023-06-06 No fix listed CWE-126
Load more