← Back

Mdm9640 Firmware

mdm9640_firmware

Vendor: Qualcomm • 495 CVEs

CVEs (495)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-22105
1Qualcomm
51Apq8009 Firmware
Apq8017 FirmwareApq8053 Firmware+48 more
Nov 21, 2024
Sep 16, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Memory corruption in bluetooth due to integer overflow while processing HFP-UNIT profile in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Voice & Music
CVE-2022-22074
1Qualcomm
154Apq8009 Firmware
Apq8009w FirmwareApq8017 Firmware+151 more
Nov 21, 2024
Sep 16, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory Corruption during wma file playback due to integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice...Show more
Memory Corruption during wma file playback due to integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesShow less
CVE-2022-22080
1Qualcomm
112Apq8053 Firmware
Apq8096au FirmwareAqt1000 Firmware+109 more
Nov 21, 2024
Sep 2, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
Improper validation of backend id in PCM routing process can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobil...Show more
Improper validation of backend id in PCM routing process can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & MusicShow less
CVE-2022-22062
1Qualcomm
199Apq8009 Firmware
Apq8009w FirmwareApq8017 Firmware+196 more
Nov 21, 2024
Sep 2, 2022
N/A· v4
9.1 CRITICAL· v3
N/A· v2
An out-of-bounds read can occur while parsing a server certificate due to improper length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Co...Show more
An out-of-bounds read can occur while parsing a server certificate due to improper length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingShow less
CVE-2021-35135
1Qualcomm
168Apq8017 Firmware
Apq8037 FirmwareApq8053 Firmware+165 more
Nov 21, 2024
Sep 2, 2022
N/A· v4
5.5 MEDIUM· v3
N/A· v2
A null pointer dereference may potentially occur during RSA key import in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Vo...Show more
A null pointer dereference may potentially occur during RSA key import in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesShow less
CVE-2022-25651
1Qualcomm
52Apq8009 Firmware
Apq8017 FirmwareApq8053 Firmware+49 more
Nov 21, 2024
Jun 14, 2022
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
Memory corruption in bluetooth host due to integer overflow while processing BT HFP-UNIT profile in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music
CVE-2022-22065
1Qualcomm
167Apq8009 Firmware
Apq8009w FirmwareApq8017 Firmware+164 more
Nov 21, 2024
Jun 14, 2022
N/A· v4
7.5 HIGH· v3
7.8 HIGH· v2
Out of bound read in WLAN HOST due to improper length check can lead to DOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdrag...Show more
Out of bound read in WLAN HOST due to improper length check can lead to DOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesShow less
CVE-2022-22064
1Qualcomm
162Apq8009 Firmware
Apq8009w FirmwareApq8017 Firmware+159 more
Nov 21, 2024
Jun 14, 2022
N/A· v4
7.5 HIGH· v3
7.8 HIGH· v2
Possible buffer over read due to lack of size validation while unpacking frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapd...Show more
Possible buffer over read due to lack of size validation while unpacking frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesShow less
CVE-2021-35116
1Qualcomm
113Apq8009 Firmware
Apq8009w FirmwareApq8096au Firmware+110 more
Nov 21, 2024
Jun 14, 2022
N/A· v4
7.1 HIGH· v3
6.6 MEDIUM· v2
APK can load a crafted model into the CDSP which can lead to a compromise of CDSP and other APK`s data executing there in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon...Show more
APK can load a crafted model into the CDSP which can lead to a compromise of CDSP and other APK`s data executing there in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon WearablesShow less
CVE-2021-35098
1Qualcomm
86Apq8053 Firmware
Apq8096au FirmwareAqt1000 Firmware+83 more
Nov 21, 2024
Jun 14, 2022
N/A· v4
6.7 MEDIUM· v3
4.6 MEDIUM· v2
Improper validation of session id in PCM routing process can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobil...Show more
Improper validation of session id in PCM routing process can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesShow less
CVE-2021-35083
1Qualcomm
174Apq8009 Firmware
Apq8009w FirmwareApq8017 Firmware+171 more
Nov 21, 2024
Jun 14, 2022
N/A· v4
9.1 CRITICAL· v3
9.4 HIGH· v2
Possible out of bound read due to improper validation of certificate chain in SSL or Internet key exchange in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Sn...Show more
Possible out of bound read due to improper validation of certificate chain in SSL or Internet key exchange in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesShow less
CVE-2021-35072
1Qualcomm
82Apq8009 Firmware
Apq8009w FirmwareApq8017 Firmware+79 more
Nov 21, 2024
Jun 14, 2022
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
Possible buffer overflow due to improper validation of array index while processing external DIAG command in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Musi...Show more
Possible buffer overflow due to improper validation of array index while processing external DIAG command in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesShow less
CVE-2021-30344
1Qualcomm
147Apq8009w Firmware
Apq8017 FirmwareApq8053 Firmware+144 more
Nov 21, 2024
Jun 14, 2022
N/A· v4
7.5 HIGH· v3
7.8 HIGH· v2
Improper authorization of a replayed LTE security mode command can lead to a denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdrag...Show more
Improper authorization of a replayed LTE security mode command can lead to a denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesShow less
CVE-2021-30342
1Qualcomm
95Apq8009w Firmware
Apq8017 FirmwareApq8096au Firmware+92 more
Nov 21, 2024
Jun 14, 2022
N/A· v4
5.9 MEDIUM· v3
7.1 HIGH· v2
Improper integrity check can lead to race condition between tasks PDCP and RRC? after a valid RRC Command packet has been received in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IO...Show more
Improper integrity check can lead to race condition between tasks PDCP and RRC? after a valid RRC Command packet has been received in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon WearablesShow less
CVE-2021-30341
1Qualcomm
120Apq8009w Firmware
Apq8096au FirmwareAqt1000 Firmware+117 more
Nov 21, 2024
Jun 14, 2022
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
Improper buffer size validation of DSM packet received can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT,...Show more
Improper buffer size validation of DSM packet received can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon WearablesShow less
CVE-2021-30333
1Qualcomm
129Apq8009w Firmware
Apq8017 FirmwareApq8053 Firmware+126 more
Nov 21, 2024
Apr 1, 2022
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
Improper validation of buffer size input to the EFS file can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobil...Show more
Improper validation of buffer size input to the EFS file can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesShow less
CVE-2021-30323
1Qualcomm
101Apq8009w Firmware
Apq8017 FirmwareApq8053 Firmware+98 more
Nov 21, 2024
Feb 11, 2022
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
Improper validation of maximum size of data write to EFS file can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice...Show more
Improper validation of maximum size of data write to EFS file can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesShow less
CVE-2021-30319
1Qualcomm
134Apq8009 Firmware
Apq8017 FirmwareApq8064au Firmware+131 more
Nov 21, 2024
Jan 13, 2022
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
Possible integer overflow due to improper validation of command length parameters while processing WMI command in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity...Show more
Possible integer overflow due to improper validation of command length parameters while processing WMI command in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & MusicShow less
CVE-2021-30300
1Qualcomm
110Apq8009w Firmware
Apq8017 FirmwareApq8096au Firmware+107 more
Nov 21, 2024
Jan 13, 2022
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Possible denial of service due to incorrectly decoding hex data for the SIB2 OTA message and assigning a garbage value to choice when processing the SRS configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Co...Show more
Possible denial of service due to incorrectly decoding hex data for the SIB2 OTA message and assigning a garbage value to choice when processing the SRS configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon WearablesShow less
CVE-2021-30348
1Qualcomm
141Apq8017 Firmware
Apq8064au FirmwareApq8096au Firmware+138 more
Nov 21, 2024
Jan 3, 2022
N/A· v4
6.5 MEDIUM· v3
3.3 LOW· v2
Improper validation of LLM utility timers availability can lead to denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT,...Show more
Improper validation of LLM utility timers availability can lead to denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & MusicShow less