VYPR

Mdm9640 Firmware

by Qualcomm

CVEs (328)

  • CVE-2019-10552CriMar 5, 2020
    Qualcomm
    Snapdragon
    risk 0.59cvss 9.1epss 0.01

    Multiple Buffer Over-read issue can happen due to improper length checks while decoding Service Reject/RAU Reject/PTMSI Realloc cmd in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon…

  • CVE-2018-13906CriJun 14, 2019
    Qualcomm
    Snapdragon
    risk 0.59cvss 9.1epss 0.01

    The HMAC authenticating the message from QSEE is vulnerable to timing side channel analysis leading to potentially forged application message in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT,…

  • CVE-2016-10492CriApr 18, 2018
    Qualcomm
    Snapdragon Mobile
    risk 0.59cvss 9.1epss 0.01

    In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9615, MDM9635M, MDM9640, MDM9645, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD…

  • CVE-2015-9124CriApr 18, 2018
    Qualcomm
    Snapdragon Mobile
    risk 0.59cvss 9.1epss 0.01

    In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9625, MDM9635M, MDM9640, MDM9645, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 615/16/SD 415, SD 800, SD 808, and SD 810, the device may crash while accessing an invalid pointer or…

  • CVE-2025-27074HigNov 4, 2025
    Qualcomm
    GP command response
    risk 0.57cvss 8.8epss 0.00

    Memory corruption while processing a GP command response.

  • CVE-2020-11269HigFeb 22, 2021
    Qualcomm
    Snapdragon
    risk 0.57cvss 8.8epss 0.00

    Possible memory corruption while processing EAPOL frames due to lack of validation of key length before using it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…

  • CVE-2020-11177HigFeb 22, 2021
    Qualcomm
    Snapdragon
    risk 0.57cvss 8.8epss 0.00

    User can overwrite Security Code NV item without knowing current SPC due to improper validation of SPC code setting and device lock in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon…

  • CVE-2019-2316HigJul 25, 2019
    Qualcomm
    Snapdragon
    risk 0.57cvss 8.8epss 0.00

    When computing the digest a local variable is used after going out of scope in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9640, QCS405, QCS605, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 665, SD 675, SD 712 / SD…

  • CVE-2018-11279HigJan 18, 2019
    Qualcomm
    Snapdragon
    risk 0.57cvss 8.8epss 0.01

    Lack of check of input size can make device memory get corrupted because of buffer overflow in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD…

  • CVE-2020-11303HigOct 20, 2021
    Qualcomm
    Snapdragon
    risk 0.56cvss 8.6epss 0.01

    Accepting AMSDU frames with mismatched destination and source address can lead to information disclosure in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon…

  • CVE-2019-10529HigNov 6, 2019
    Qualcomm
    Snapdragon
    risk 0.56cvss 8.1epss 0.02

    Possible use after free issue due to race condition while attempting to mark the entry pages as dirty using function set_page_dirty() in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice &…

  • CVE-2018-5852HigNov 26, 2024
    Qualcomm
    IPA driver
    risk 0.55cvss 8.4epss 0.00

    An unsigned integer underflow vulnerability in IPA driver result into a buffer over-read while reading NAT entry using debugfs command 'cat /sys/kernel/debug/ipa/ip4_nat'

  • CVE-2024-21468HigApr 1, 2024
    Qualcomm
    GPU
    risk 0.55cvss 8.4epss 0.00

    Memory corruption when there is failed unmap operation in GPU.

  • CVE-2023-33066HigMar 4, 2024
    Qualcomm
    Audio
    risk 0.55cvss 8.4epss 0.00

    Memory corruption in Audio while processing RT proxy port register driver.

  • CVE-2023-33033HigJan 2, 2024
    Qualcomm
    Audio
    risk 0.55cvss 8.4epss 0.00

    Memory corruption in Audio during playback with speaker protection.

  • CVE-2022-40531HigMar 10, 2023
    Qualcomm
    WLAN
    risk 0.55cvss 8.4epss 0.00

    Memory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID message.

  • CVE-2022-25694HigMar 10, 2023
    Qualcomm
    Modem
    risk 0.55cvss 8.4epss 0.00

    Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM

  • CVE-2022-40520HigJan 9, 2023
    Qualcomm
    Core
    risk 0.55cvss 8.4epss 0.01

    Memory corruption due to stack-based buffer overflow in Core

  • CVE-2022-25682HigDec 13, 2022
    Qualcomm
    Snapdragon
    risk 0.55cvss 8.4epss 0.00

    Memory corruption in MODEM UIM due to usage of out of range pointer offset while decoding command from card in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music,…

  • CVE-2022-22058HigSep 26, 2022
    Qualcomm
    Snapdragon
    risk 0.55cvss 8.4epss 0.00

    Memory corruption due to use after free issue in kernel while processing ION handles in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon…

Page 6 of 17