MF
Product
Mdm8207 Firmware
106
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 26High 73Medium 7Low 0
Watch
Add Mdm8207 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-25739 | 7.5 | Apr 13 | Denial of service in modem due to missing null check while processing the ipv6 packet received during ECM call Affected: All versions, or not specified |
| CVE-2022-25737 | 7.5 | Apr 13 | Information disclosure in modem due to missing NULL check while reading packets received from local network Affected: All versions, or not specified |
| CVE-2022-25731 | 7.5 | Apr 13 | Information disclosure in modem due to buffer over-read while processing packets from DNS server Affected: All versions, or not specified |
| CVE-2022-25730 | 7.5 | Apr 13 | Information disclosure in modem due to improper check of IP type while processing DNS server query Affected: All versions, or not specified |
| CVE-2022-25726 | 7.5 | Apr 13 | Information disclosure in modem data due to array out of bound access while handling the incoming DNS response packet Affected: All versions, or not specified |
| CVE-2022-33229 | 7.5 | Feb 12 | Information disclosure due to buffer over-read in Modem while using static array to process IPv4 packets Affected: All versions, or not specified |
| CVE-2022-25738 | 7.5 | Feb 12 | Information disclosure in modem due to buffer over-red while performing checksum of packet received Affected: All versions, or not specified |
| CVE-2022-25735 | 7.5 | Feb 12 | Denial of service in modem due to missing null check while processing TCP or UDP packets from server Affected: All versions, or not specified |
| CVE-2022-25734 | 7.5 | Feb 12 | Denial of service in modem due to missing null check while processing IP packets with padding Affected: All versions, or not specified |
| CVE-2022-25733 | 7.5 | Feb 12 | Denial of service in modem due to null pointer dereference while processing DNS packets Affected: All versions, or not specified |
| CVE-2022-25732 | 7.5 | Feb 12 | Information disclosure in modem due to buffer over read in dns client due to missing length check Affected: All versions, or not specified |
| CVE-2022-25728 | 7.5 | Feb 12 | Information disclosure in modem due to buffer over-read while processing response from DNS server Affected: All versions, or not specified |
| CVE-2022-25742 | 7.5 | Nov 15 | Denial of service in modem due to infinite loop while parsing IGMPv2 packet from server in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music Affected: All versions, or not specified |
| CVE-2021-30344 | 7.5 | Jun 14 | Improper authorization of a replayed LTE security mode command can lead to a denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2021-30300 | 7.5 | Jan 13 | Possible denial of service due to incorrectly decoding hex data for the SIB2 OTA message and assigning a garbage value to choice when processing the SRS configuration in… Affected: All versions, or not specified |
| CVE-2021-30273 | 7.5 | Jan 3 | Possible assertion due to improper handling of IPV6 packet with invalid length in destination options header in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2021-1914 | 7.5 | Sep 8 | Loop with unreachable exit condition may occur due to improper handling of unsupported input in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2020-11255 | 7.5 | Apr 7 | Denial of service while processing RTCP packets containing multiple SDES reports due to memory for last SDES packet is freed and rest of the memory is leaked in Snapdragon Auto,… Affected: All versions, or not specified |
| CVE-2020-11226 | 7.5 | Mar 17 | Out of bound memory read in Data modem while unpacking data due to lack of offset length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2025-47383 | 7.2 | Mar 2 | Missing Cryptographic Step in Data Modem Affected: All versions, or not specified |
| CVE-2023-21626 | 7.1 | Aug 8 | Cryptographic issue in HLOS due to improper authentication while performing key velocity checks using more than one key Affected: All versions, or not specified |
| CVE-2020-11304 | 7.1 | Jun 9 | Possible out of bound read in DRM due to improper buffer length check Affected: All versions, or not specified |
| CVE-2020-11132 | 7.1 | Nov 12 | u'Buffer over read in boot due to size check ignored before copying GUID attribute from request to response' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
