Mdm9607 Firmware

CVEs (723)

• CVE-2018-5852HigNov 26, 2024
  Qualcomm

  IPA driver
  risk 0.55cvss 8.4epss 0.00

  An unsigned integer underflow vulnerability in IPA driver result into a buffer over-read while reading NAT entry using debugfs command 'cat /sys/kernel/debug/ipa/ip4_nat'

• CVE-2018-11952HigNov 26, 2024
  Qualcomm

  fuse
  risk 0.55cvss 8.4epss 0.00

  An image with a version lower than the fuse version may potentially be booted lead to improper authentication.

• CVE-2017-15832HigNov 26, 2024
  Qualcomm

  WLAN host driver
  risk 0.55cvss 8.4epss 0.00

  Buffer overwrite in the WLAN host driver by leveraging a compromised WLAN FW

• CVE-2016-10394HigNov 26, 2024
  Qualcomm

  Sd 845 Firmware
  risk 0.55cvss 8.4epss 0.00

  Initial xbl_sec revision does not have all the debug policy features and critical checks.

• CVE-2022-40531HigMar 10, 2023
  Qualcomm

  WLAN
  risk 0.55cvss 8.4epss 0.00

  Memory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID message.

• CVE-2022-25694HigMar 10, 2023
  Qualcomm

  Modem
  risk 0.55cvss 8.4epss 0.00

  Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM

• CVE-2022-25655HigMar 10, 2023
  Qualcomm

  WLAN HAL
  risk 0.55cvss 8.4epss 0.00

  Memory corruption in WLAN HAL while arbitrary value is passed in WMI UTF command payload.

• CVE-2022-25695HigDec 13, 2022
  Qualcomm

  Snapdragon
  risk 0.55cvss 8.4epss 0.00

  Memory corruption in MODEM due to Improper Validation of Array Index while processing GSTK Proactive commands in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice…

• CVE-2022-25682HigDec 13, 2022
  Qualcomm

  Snapdragon
  risk 0.55cvss 8.4epss 0.00

  Memory corruption in MODEM UIM due to usage of out of range pointer offset while decoding command from card in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music,…

• CVE-2022-25743HigNov 15, 2022
  Qualcomm

  Snapdragon
  risk 0.55cvss 8.4epss 0.00

  Memory corruption in graphics due to use-after-free while importing graphics buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

• CVE-2022-25724HigNov 15, 2022
  Qualcomm

  Snapdragon
  risk 0.55cvss 8.4epss 0.00

  Memory corruption in graphics due to buffer overflow while validating the user address in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

• CVE-2022-22058HigSep 26, 2022
  Qualcomm

  Snapdragon
  risk 0.55cvss 8.4epss 0.00

  Memory corruption due to use after free issue in kernel while processing ION handles in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon…

• CVE-2022-22074HigSep 16, 2022
  Qualcomm

  Snapdragon
  risk 0.55cvss 8.4epss 0.00

  Memory Corruption during wma file playback due to integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

• CVE-2022-22085HigJun 14, 2022
  Qualcomm

  Snapdragon
  risk 0.55cvss 8.4epss 0.00

  Memory corruption in video due to buffer overflow while reading the dts file in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

• CVE-2022-22084HigJun 14, 2022
  Qualcomm

  Snapdragon
  risk 0.55cvss 8.4epss 0.00

  Memory corruption when extracting qcp audio file due to lack of check on data length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

• CVE-2022-22082HigJun 14, 2022
  Qualcomm

  Snapdragon
  risk 0.55cvss 8.4epss 0.00

  Memory corruption due to possible buffer overflow while parsing DSF header with corrupted channel count in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon…

• CVE-2021-30318HigFeb 11, 2022
  Qualcomm

  Snapdragon
  risk 0.55cvss 8.4epss 0.00

  Improper validation of input when provisioning the HDCP key can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables

• CVE-2021-30337HigJan 3, 2022
  Qualcomm

  Snapdragon
  risk 0.55cvss 8.4epss 0.00

  Possible use after free when process shell memory is freed using IOCTL call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music,…

• CVE-2021-1949HigOct 20, 2021
  Qualcomm

  Snapdragon
  risk 0.55cvss 8.4epss 0.00

  Possible integer overflow due to improper check of batch count value while sanitizer is enabled in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables

• CVE-2021-30261HigSep 17, 2021
  Qualcomm

  Snapdragon Mobile
  risk 0.55cvss 8.4epss 0.00

  Possible integer and heap overflow due to lack of input command size validation while handling beacon template update command from HLOS in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon…