← Back

Msm8940 Firmware

msm8940_firmware

Vendor: Qualcomm • 213 CVEs

CVEs (213)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-21626
1Qualcomm
185Apq8009 Firmware
Apq8017 FirmwareApq8037 Firmware+182 more
Nov 21, 2024
Aug 8, 2023
N/A· v4
7.1 HIGH· v3
N/A· v2
Cryptographic issue in HLOS due to improper authentication while performing key velocity checks using more than one key.
CVE-2022-40510
1Qualcomm
204Apq8009 Firmware
Apq8009w FirmwareApq8017 Firmware+201 more
Nov 21, 2024
Aug 8, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder.
CVE-2022-33213
1Qualcomm
209Apq8009 Firmware
Apq8009w FirmwareApq8017 Firmware+206 more
Nov 21, 2024
Mar 10, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
Memory corruption in modem due to buffer overflow while processing a PPP packet
CVE-2022-25705
1Qualcomm
201Apq8009 Firmware
Apq8009w FirmwareApq8017 Firmware+198 more
Nov 21, 2024
Mar 10, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption in modem due to integer overflow to buffer overflow while handling APDU response
CVE-2022-25694
1Qualcomm
208Apq8009 Firmware
Apq8009w FirmwareApq8017 Firmware+205 more
Nov 21, 2024
Mar 10, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM
CVE-2022-33233
1Qualcomm
201Apq8009 Firmware
Apq8009w FirmwareApq8017 Firmware+198 more
Nov 21, 2024
Feb 12, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption due to configuration weakness in modem wile sending command to write protected files.
CVE-2022-25695
1Qualcomm
197Apq8009 Firmware
Apq8009w FirmwareApq8017 Firmware+194 more
Apr 22, 2025
Dec 13, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption in MODEM due to Improper Validation of Array Index while processing GSTK Proactive commands in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industria...Show more
Memory corruption in MODEM due to Improper Validation of Array Index while processing GSTK Proactive commands in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesShow less
CVE-2022-25682
1Qualcomm
204Apq8009 Firmware
Apq8009w FirmwareApq8017 Firmware+201 more
Apr 22, 2025
Dec 13, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption in MODEM UIM due to usage of out of range pointer offset while decoding command from card in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial...Show more
Memory corruption in MODEM UIM due to usage of out of range pointer offset while decoding command from card in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesShow less
CVE-2022-25719
1Qualcomm
118Apq8009 Firmware
Apq8009w FirmwareApq8016 Firmware+115 more
May 9, 2025
Oct 19, 2022
N/A· v4
9.1 CRITICAL· v3
N/A· v2
Information disclosure in WLAN due to improper length check while processing authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Sn...Show more
Information disclosure in WLAN due to improper length check while processing authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingShow less
CVE-2022-25718
1Qualcomm
142Apq8009 Firmware
Apq8009w FirmwareApq8016 Firmware+139 more
May 9, 2025
Oct 19, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Cryptographic issue in WLAN due to improper check on return value while authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdra...Show more
Cryptographic issue in WLAN due to improper check on return value while authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingShow less
CVE-2022-22091
1Qualcomm
129Apq8017 Firmware
Apq8053 FirmwareAqt1000 Firmware+126 more
Nov 21, 2024
Sep 16, 2022
N/A· v4
7.5 HIGH· v3
N/A· v2
Improper authorization of a replayed LTE security mode command can lead to a denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdrag...Show more
Improper authorization of a replayed LTE security mode command can lead to a denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon WearablesShow less
CVE-2022-22062
1Qualcomm
199Apq8009 Firmware
Apq8009w FirmwareApq8017 Firmware+196 more
Nov 21, 2024
Sep 2, 2022
N/A· v4
9.1 CRITICAL· v3
N/A· v2
An out-of-bounds read can occur while parsing a server certificate due to improper length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Co...Show more
An out-of-bounds read can occur while parsing a server certificate due to improper length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingShow less
CVE-2021-35135
1Qualcomm
168Apq8017 Firmware
Apq8037 FirmwareApq8053 Firmware+165 more
Nov 21, 2024
Sep 2, 2022
N/A· v4
5.5 MEDIUM· v3
N/A· v2
A null pointer dereference may potentially occur during RSA key import in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Vo...Show more
A null pointer dereference may potentially occur during RSA key import in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesShow less
CVE-2021-35083
1Qualcomm
174Apq8009 Firmware
Apq8009w FirmwareApq8017 Firmware+171 more
Nov 21, 2024
Jun 14, 2022
N/A· v4
9.1 CRITICAL· v3
9.4 HIGH· v2
Possible out of bound read due to improper validation of certificate chain in SSL or Internet key exchange in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Sn...Show more
Possible out of bound read due to improper validation of certificate chain in SSL or Internet key exchange in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesShow less
CVE-2021-35072
1Qualcomm
82Apq8009 Firmware
Apq8009w FirmwareApq8017 Firmware+79 more
Nov 21, 2024
Jun 14, 2022
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
Possible buffer overflow due to improper validation of array index while processing external DIAG command in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Musi...Show more
Possible buffer overflow due to improper validation of array index while processing external DIAG command in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesShow less
CVE-2021-30284
1Qualcomm
146Apq8009 Firmware
Apq8009w FirmwareApq8017 Firmware+143 more
Nov 21, 2024
Nov 12, 2021
N/A· v4
9.1 CRITICAL· v3
6.4 MEDIUM· v2
Possible information exposure and denial of service due to NAS not dropping messages when integrity check fails in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industr...Show more
Possible information exposure and denial of service due to NAS not dropping messages when integrity check fails in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesShow less
CVE-2021-30255
1Qualcomm
188Apq8009 Firmware
Apq8009w FirmwareApq8017 Firmware+185 more
Nov 21, 2024
Nov 12, 2021
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
Possible buffer overflow due to improper input validation in PDM DIAG command in FTM in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Sn...Show more
Possible buffer overflow due to improper input validation in PDM DIAG command in FTM in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesShow less
CVE-2021-30254
1Qualcomm
163Apq8009 Firmware
Apq8009w FirmwareApq8017 Firmware+160 more
Nov 21, 2024
Nov 12, 2021
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
Possible buffer overflow due to improper input validation in factory calibration and test DIAG command in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,...Show more
Possible buffer overflow due to improper input validation in factory calibration and test DIAG command in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesShow less
CVE-2021-1975
1Qualcomm
180Apq8009 Firmware
Apq8009w FirmwareApq8017 Firmware+177 more
Nov 21, 2024
Nov 12, 2021
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
Possible heap overflow due to improper length check of domain while parsing the DNS response in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon...Show more
Possible heap overflow due to improper length check of domain while parsing the DNS response in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon WearablesShow less
CVE-2021-1973
1Qualcomm
197Apq8009 Firmware
Apq8009w FirmwareApq8017 Firmware+194 more
Nov 21, 2024
Nov 12, 2021
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
A FTM Diag command can allow an arbitrary write into modem OS space in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile,...Show more
A FTM Diag command can allow an arbitrary write into modem OS space in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesShow less