Mdm9628 Firmware

CVEs (266)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2022-33213	Qualcomm Modem	Hig	0.49	7.5	0.00	Mar 10, 2023	Memory corruption in modem due to buffer overflow while processing a PPP packet
CVE-2022-40512	Qualcomm WLAN Firmware	Hig	0.49	7.5	0.00	Feb 12, 2023	Transient DOS in WLAN Firmware due to buffer over-read while processing probe response or beacon.
CVE-2022-33299	Qualcomm Bluetooth HOST	Hig	0.49	7.5	0.00	Jan 9, 2023	Transient DOS due to null pointer dereference in Bluetooth HOST while receiving an attribute protocol PDU with zero length data.
CVE-2022-33290	Qualcomm Bluetooth HOST	Hig	0.49	7.5	0.00	Jan 9, 2023	Transient DOS in Bluetooth HOST due to null pointer dereference when a mismatched argument is passed.
CVE-2022-33286	Qualcomm WLAN	Hig	0.49	7.5	0.00	Jan 9, 2023	Transient DOS due to buffer over-read in WLAN while processing 802.11 management frames.
CVE-2022-33285	Qualcomm WLAN	Hig	0.49	7.5	0.00	Jan 9, 2023	Transient DOS due to buffer over-read in WLAN while parsing WLAN CSA action frames.
CVE-2022-33238	Qualcomm Snapdragon	Hig	0.49	7.5	0.00	Dec 13, 2022	Transient DOS due to loop with unreachable exit condition in WLAN while processing an incoming FTM frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…
CVE-2022-33239	Qualcomm Snapdragon	Hig	0.49	7.5	0.00	Nov 15, 2022	Transient DOS due to loop with unreachable exit condition in WLAN firmware while parsing IPV6 extension header. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…
CVE-2022-33237	Qualcomm Snapdragon	Hig	0.49	7.5	0.00	Nov 15, 2022	Transient DOS due to buffer over-read in WLAN firmware while processing PPE threshold. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon…
CVE-2022-25710	Qualcomm Snapdragon	Hig	0.49	7.5	0.00	Nov 15, 2022	Denial of service due to null pointer dereference when GATT is disconnected in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music
CVE-2022-25749	Qualcomm Snapdragon	Hig	0.49	7.5	0.00	Oct 19, 2022	Transient Denial-of-Service in WLAN due to buffer over-read while parsing MDNS frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon…
CVE-2022-25736	Qualcomm Snapdragon	Hig	0.49	7.5	0.01	Oct 19, 2022	Denial of service in WLAN due to out-of-bound read happens while processing VHT action frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile,…
CVE-2022-25690	Qualcomm Snapdragon	Hig	0.49	7.5	0.00	Sep 16, 2022	Information disclosure in WLAN due to improper validation of array index while parsing crafted ANQP action frames in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…
CVE-2022-25670	Qualcomm Snapdragon	Hig	0.49	7.5	0.00	Sep 16, 2022	Denial of service in WLAN HOST due to buffer over read while unpacking frames in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice &…
CVE-2022-25669	Qualcomm Snapdragon	Hig	0.49	7.5	0.00	Sep 16, 2022	Denial of service in video due to buffer over read while parsing MP4 clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2022-22083	Qualcomm Snapdragon	Hig	0.49	7.5	0.01	Jun 14, 2022	Denial of service due to memory corruption while extracting ape header from clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2022-22065	Qualcomm Snapdragon	Hig	0.49	7.5	0.01	Jun 14, 2022	Out of bound read in WLAN HOST due to improper length check can lead to DOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice &…
CVE-2022-22064	Qualcomm Snapdragon	Hig	0.49	7.5	0.01	Jun 14, 2022	Possible buffer over read due to lack of size validation while unpacking frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice &…
CVE-2021-35100	Qualcomm Snapdragon	Hig	0.49	7.5	0.01	Jun 14, 2022	Possible buffer over read due to improper calculation of string length while parsing Id3 tag in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2021-30344	Qualcomm Snapdragon	Hig	0.49	7.5	0.01	Jun 14, 2022	Improper authorization of a replayed LTE security mode command can lead to a denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CVE-2022-33213HigMar 10, 2023
Qualcomm
Modem
risk 0.49cvss 7.5epss 0.00
Memory corruption in modem due to buffer overflow while processing a PPP packet
CVE-2022-40512HigFeb 12, 2023
Qualcomm
WLAN Firmware
risk 0.49cvss 7.5epss 0.00
Transient DOS in WLAN Firmware due to buffer over-read while processing probe response or beacon.
CVE-2022-33299HigJan 9, 2023
Qualcomm
Bluetooth HOST
risk 0.49cvss 7.5epss 0.00
Transient DOS due to null pointer dereference in Bluetooth HOST while receiving an attribute protocol PDU with zero length data.
CVE-2022-33290HigJan 9, 2023
Qualcomm
Bluetooth HOST
risk 0.49cvss 7.5epss 0.00
Transient DOS in Bluetooth HOST due to null pointer dereference when a mismatched argument is passed.
CVE-2022-33286HigJan 9, 2023
Qualcomm
WLAN
risk 0.49cvss 7.5epss 0.00
Transient DOS due to buffer over-read in WLAN while processing 802.11 management frames.
CVE-2022-33285HigJan 9, 2023
Qualcomm
WLAN
risk 0.49cvss 7.5epss 0.00
Transient DOS due to buffer over-read in WLAN while parsing WLAN CSA action frames.
CVE-2022-33238HigDec 13, 2022
Qualcomm
Snapdragon
risk 0.49cvss 7.5epss 0.00
Transient DOS due to loop with unreachable exit condition in WLAN while processing an incoming FTM frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…
CVE-2022-33239HigNov 15, 2022
Qualcomm
Snapdragon
risk 0.49cvss 7.5epss 0.00
Transient DOS due to loop with unreachable exit condition in WLAN firmware while parsing IPV6 extension header. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…
CVE-2022-33237HigNov 15, 2022
Qualcomm
Snapdragon
risk 0.49cvss 7.5epss 0.00
Transient DOS due to buffer over-read in WLAN firmware while processing PPE threshold. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon…
CVE-2022-25710HigNov 15, 2022
Qualcomm
Snapdragon
risk 0.49cvss 7.5epss 0.00
Denial of service due to null pointer dereference when GATT is disconnected in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music
CVE-2022-25749HigOct 19, 2022
Qualcomm
Snapdragon
risk 0.49cvss 7.5epss 0.00
Transient Denial-of-Service in WLAN due to buffer over-read while parsing MDNS frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon…
CVE-2022-25736HigOct 19, 2022
Qualcomm
Snapdragon
risk 0.49cvss 7.5epss 0.01
Denial of service in WLAN due to out-of-bound read happens while processing VHT action frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile,…
CVE-2022-25690HigSep 16, 2022
Qualcomm
Snapdragon
risk 0.49cvss 7.5epss 0.00
Information disclosure in WLAN due to improper validation of array index while parsing crafted ANQP action frames in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…
CVE-2022-25670HigSep 16, 2022
Qualcomm
Snapdragon
risk 0.49cvss 7.5epss 0.00
Denial of service in WLAN HOST due to buffer over read while unpacking frames in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice &…
CVE-2022-25669HigSep 16, 2022
Qualcomm
Snapdragon
risk 0.49cvss 7.5epss 0.00
Denial of service in video due to buffer over read while parsing MP4 clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2022-22083HigJun 14, 2022
Qualcomm
Snapdragon
risk 0.49cvss 7.5epss 0.01
Denial of service due to memory corruption while extracting ape header from clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2022-22065HigJun 14, 2022
Qualcomm
Snapdragon
risk 0.49cvss 7.5epss 0.01
Out of bound read in WLAN HOST due to improper length check can lead to DOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice &…
CVE-2022-22064HigJun 14, 2022
Qualcomm
Snapdragon
risk 0.49cvss 7.5epss 0.01
Possible buffer over read due to lack of size validation while unpacking frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice &…
CVE-2021-35100HigJun 14, 2022
Qualcomm
Snapdragon
risk 0.49cvss 7.5epss 0.01
Possible buffer over read due to improper calculation of string length while parsing Id3 tag in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2021-30344HigJun 14, 2022
Qualcomm
Snapdragon
risk 0.49cvss 7.5epss 0.01
Improper authorization of a replayed LTE security mode command can lead to a denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Page 10 of 14