Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

81 records

Vendor: Qualcomm Component: Sm8450 Firmware Clear all filters
TI-2023-16263 CVE-2023-33080 · GHSA-rh2q-252v-ccqc

Buffer over-read in WLAN Firmware

Priority LOW 39

Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management frame.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00338 Published 2023-12-05 No fix listed CWE-126
TI-2023-16248 CVE-2023-33063 · GHSA-534v-34xw-2g2m

Use After Free in DSP Services

Priority CRITICAL 93KEV

Memory corruption in DSP Services during a remote call from HLOS to DSP.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00672 Published 2023-12-05 No fix listed CWE-416
TI-2023-16239 CVE-2023-33054 · GHSA-9v76-xcm4-wwhw

Improper Authentication in GPS HLOS Driver

Priority LOW 39

Cryptographic issue in GPS HLOS Driver while downloading Qualcomm GNSS assistance data.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00361 Published 2023-12-05 No fix listed CWE-287
TI-2023-16232 CVE-2023-33044 · GHSA-2xgj-p3p2-vx5f

Reachable Assertion in Data Modem

Priority LOW 33

Transient DOS in Data modem while handling TLB control messages from the Network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00515 Published 2023-12-05 No fix listed CWE-617
TI-2023-16231 CVE-2023-33043 · GHSA-pqhc-9r4h-w7g3

Reachable Assertion in Modem

Priority LOW 33

Transient DOS in Modem when a Beam switch request is made with a non-configured BWP.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00515 Published 2023-12-05 No fix listed CWE-617
TI-2023-16230 CVE-2023-33042 · GHSA-m5xw-3jph-chxg

Improper Input Validation in Modem

Priority LOW 34

Transient DOS in Modem after RRC Setup message is received.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00607 Published 2023-12-05 No fix listed CWE-20
TI-2023-16210 CVE-2023-33022 · GHSA-48vm-fq56-767f

Integer Overflow to Buffer Overflow in HLOS

Priority LOW 38

Memory corruption in HLOS while invoking IOCTL calls from user-space.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00159 Published 2023-12-05 No fix listed CWE-680
TI-2023-16205 CVE-2023-33017 · GHSA-xmc3-8wf5-r59w

Buffer Copy Without Checking Size of Input in Boot

Priority LOW 33

Memory corruption in Boot while running a ListVars test in UEFI Menu during boot.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00157 Published 2023-12-05 No fix listed CWE-120
TI-2023-16235 CVE-2023-33047 · GHSA-xq75-p9cv-wvw7

Buffer Over-read in WLAN Firmware

Priority LOW 34

Transient DOS in WLAN Firmware while parsing no-inherit IES.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00534 Published 2023-11-07 No fix listed CWE-126
TI-2023-16217 CVE-2023-33029 · GHSA-vchp-mc49-g36w

Use After Free in DSP Service

Priority LOW 37

Memory corruption in DSP Service during a remote call from HLOS to DSP.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00116 Published 2023-10-03 No fix listed CWE-416
TI-2023-16215 CVE-2023-33027 · GHSA-hxqc-xv34-842x

Buffer Over-read in WLAN Firmware

Priority LOW 39

Transient DOS in WLAN Firmware while parsing rsn ies.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00387 Published 2023-10-03 No fix listed CWE-126
TI-2023-16214 CVE-2023-33026 · GHSA-h89f-5h94-vmj5

Buffer over-read in WLAN Firmware

Priority LOW 39

Transient DOS in WLAN Firmware while parsing a NAN management frame.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00387 Published 2023-10-03 No fix listed CWE-126
TI-2023-13072 CVE-2023-28540 · GHSA-fmqm-mv4m-4vh3

Improper Authentication in Data Modem

Priority MEDIUM 48

Cryptographic issue in Data Modem due to improper authentication during TLS handshake.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00431 Published 2023-10-03 No fix listed CWE-287
TI-2023-08034 CVE-2023-21646 · GHSA-g2g3-xc9m-vr7r

Reachable Assertion in Modem

Priority LOW 39

Transient DOS in Modem while processing invalid System Information Block 1.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00383 Published 2023-09-05 No fix listed CWE-617
TI-2022-14697 CVE-2022-33275 · GHSA-jv4q-hvqc-9497

Improper validation of array index in WLAN HAL

Priority LOW 37

Memory corruption due to improper validation of array index in WLAN HAL when received lm_itemNum is out of range.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00116 Published 2023-09-05 No fix listed CWE-129
TI-2023-13086 CVE-2023-28555 · GHSA-4fmh-mf22-vcrx

Buffer Over-read in Audio

Priority LOW 39

Transient DOS in Audio while remapping channel buffer in media codec decoding.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00406 Published 2023-08-08 No fix listed CWE-126
TI-2023-08057 CVE-2023-21670 · GHSA-w2x2-g32p-v8fp

Improper Access control in GPU Subsystem

Priority LOW 35

Memory Corruption in GPU Subsystem due to arbitrary command execution from GPU in privileged mode.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00116 Published 2023-06-06 No fix listed CWE-284
TI-2023-08049 CVE-2023-21661 · GHSA-qcvh-ffq5-55f3

Buffer Over-read in WLAN Firmware

Priority LOW 39

Transient DOS while parsing WLAN beacon or probe-response frame.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00383 Published 2023-06-06 No fix listed CWE-126
TI-2023-08048 CVE-2023-21660 · GHSA-9rm7-7c5c-f5vj

Buffer Over-read in WLAN Firmware

Priority LOW 39

Transient DOS in WLAN Firmware while parsing FT Information Elements.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00383 Published 2023-06-06 No fix listed CWE-126
TI-2023-08047 CVE-2023-21659 · GHSA-pggh-8r27-x766

Buffer Over-read in WLAN Firmware

Priority LOW 33

Transient DOS in WLAN Firmware while processing frames with missing header fields.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00383 Published 2023-06-06 No fix listed CWE-126
TI-2023-08046 CVE-2023-21658 · GHSA-w8vw-44wp-qv75

Buffer Over-Read in WLAN Firmware

Priority LOW 39

Transient DOS in WLAN Firmware while processing the received beacon or probe response frame.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00383 Published 2023-06-06 No fix listed CWE-126
Load more