MF
Product
Mdm9206 Firmware
On CISA KEVExploited in the wild
734
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 292High 207Medium 1Low 0
Watch
Add Mdm9206 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-1905 In wildKEV | 7.8 | May 7 | Qualcomm Multiple Chipsets Use-After-Free Vulnerability Affected: All versions, or not specified |
| CVE-2021-1906 In wildKEV | 5.5 | May 7 | Qualcomm Multiple Chipsets Detection of Error Condition Without Action Vulnerability Affected: All versions, or not specified |
| CVE-2022-40510 | 9.8 | Aug 8 | Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder Affected: All versions, or not specified |
| CVE-2022-33259 | 9.8 | Apr 13 | Memory corruption due to buffer copy without checking the size of input in modem while decoding raw SMS received Affected: All versions, or not specified |
| CVE-2022-33211 | 9.8 | Apr 13 | memory corruption in modem due to improper check while calculating size of serialized CoAP message Affected: All versions, or not specified |
| CVE-2022-25740 | 9.8 | Apr 13 | Memory corruption in modem due to buffer overwrite while building an IPv6 multicast address based on the MAC address of the iface Affected: All versions, or not specified |
| CVE-2022-25678 | 9.8 | Apr 13 | Memory correction in modem due to buffer overwrite during coap connection Affected: All versions, or not specified |
| CVE-2022-40515 | 9.8 | Mar 10 | Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms Affected: All versions, or not specified |
| CVE-2022-25729 | 9.8 | Feb 12 | Memory corruption in modem due to improper length check while copying into memory Affected: All versions, or not specified |
| CVE-2022-25727 | 9.8 | Nov 15 | Memory Corruption in modem due to improper length check while copying into memory in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music Affected: All versions, or not specified |
| CVE-2022-25748 | 9.8 | Oct 19 | Memory corruption in WLAN due to integer overflow to buffer overflow while parsing GTK frames Affected: All versions, or not specified |
| CVE-2022-25720 | 9.8 | Oct 19 | Memory corruption in WLAN due to out of bound array access during connect/roaming in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics… Affected: All versions, or not specified |
| CVE-2022-25718 | 9.8 | Oct 19 | Cryptographic issue in WLAN due to improper check on return value while authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics… Affected: All versions, or not specified |
| CVE-2022-25687 | 9.8 | Oct 19 | memory corruption in video due to buffer overflow while parsing asf clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2022-25688 | 9.8 | Sep 16 | Memory corruption in video due to buffer overflow while parsing ps video clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2022-25668 | 9.8 | Sep 2 | Memory corruption in video driver due to double free while parsing ASF clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2022-25659 | 9.8 | Sep 2 | Memory corruption due to buffer overflow while parsing MKV clips with invalid bitmap size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2022-25658 | 9.8 | Sep 2 | Memory corruption due to incorrect pointer arithmetic when attempting to change the endianness in video parser function in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2022-22087 | 9.8 | Jun 14 | memory corruption in video due to buffer overflow while parsing mkv clip with no codechecker in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2022-22086 | 9.8 | Jun 14 | Memory corruption in video due to double free while parsing 3gp clip with invalid meta data atoms in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-35104 | 9.8 | Jun 14 | Possible buffer overflow due to improper parsing of headers while playing the FLAC audio clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2021-30341 | 9.8 | Jun 14 | Improper buffer size validation of DSM packet received can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2021-30351 | 9.8 | Jan 3 | An out of bound memory access can occur due to improper validation of number of frames being passed during music playback in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1975 | 9.8 | Nov 12 | Possible heap overflow due to improper length check of domain while parsing the DNS response in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2021-1976 | 9.8 | Sep 17 | A use after free can occur due to improper validation of P2P device address in PD Request frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1972 | 9.8 | Sep 8 | Possible buffer overflow due to improper validation of device types during P2P search in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2021-1920 | 9.8 | Sep 8 | Integer underflow can occur due to improper handling of incoming RTCP packets in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1919 | 9.8 | Sep 8 | Integer underflow can occur when the RTCP length is lesser than than the actual blocks present in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2021-1916 | 9.8 | Sep 8 | Possible buffer underflow due to lack of check for negative indices values when processing user provided input in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2021-1910 | 9.8 | May 7 | Double free in video due to lack of input buffer length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,… Affected: All versions, or not specified |
| CVE-2020-11279 | 9.8 | May 7 | Memory corruption while processing crafted SDES packets due to improper length check in sdes packets recieved in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2020-11299 | 9.8 | Mar 17 | Buffer overflow can occur in video while playing the non-standard clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2020-11227 | 9.8 | Mar 17 | Out of bound write while parsing RTT/TTY packet parsing due to lack of check of buffer size before copying into buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2020-11192 | 9.8 | Mar 17 | Out of bound write while parsing SDP string due to missing check on null termination in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2020-11272 | 9.8 | Feb 22 | Before enqueuing a frame to the PE queue for further processing, an entry in a hash table can be deleted and using a stale version later can lead to use after free condition in… Affected: All versions, or not specified |
| CVE-2020-11170 | 9.8 | Feb 22 | Out of bound memory access while playing music playbacks with crafted vorbis content due to improper checks in header extraction in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2020-11196 | 9.8 | Nov 12 | u'Integer overflow to buffer overflow occurs while playback of ASF clip having unexpected number of codec entries' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2020-11193 | 9.8 | Nov 12 | u'Buffer over read can happen while parsing mkv clip due to improper typecasting of data returned from atomsize' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2020-11168 | 9.8 | Nov 12 | u'Null-pointer dereference can occur while accessing data buffer beyond its size that leads to access the buffer beyond its range' in Snapdragon Auto, Snapdragon Compute,… Affected: All versions, or not specified |
| CVE-2020-3703 | 9.8 | Nov 2 | u'Buffer over-read issue in Bluetooth peripheral firmware due to lack of check for invalid opcode and length of opcode received from central device(This CVE is equivalent to Link… Affected: All versions, or not specified |
| CVE-2020-3657 | 9.8 | Nov 2 | u'Remote code execution can happen by sending a carefully crafted POST query when Device configuration is accessed from a tethered client through webserver due to lack of array… Affected: All versions, or not specified |
| CVE-2020-11116 | 9.8 | Sep 8 | u'Possible out of bound write while processing association response received from host due to lack of check of IE length' in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2019-14052 | 9.8 | Sep 8 | u'Accessing an uninitialized data structure could result in partially copying of contents and thus incorrect processing' in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2020-3699 | 9.8 | Jul 30 | Possible out of bound access while processing assoc response from host due to improper length check before copying into buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2020-3698 | 9.8 | Jul 30 | Out of bound write while QoS DSCP mapping due to improper input validation for data received from association response frame in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2020-3688 | 9.8 | Jul 30 | Possible buffer overflow while parsing mp4 clip with corrupted sample atoms due to improper validation of index in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2020-3663 | 9.8 | Jun 22 | Buffer over-write may occur during fetching track decoder specific information if cb size exceeds buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2020-3661 | 9.8 | Jun 22 | Buffer overflow will happen while parsing mp4 clip with corrupted sample atoms values which exceeds MAX_UINT32 range due to lack of validation checks in Snapdragon Auto,… Affected: All versions, or not specified |
| CVE-2020-3660 | 9.8 | Jun 22 | Possible null-pointer dereference can occur while parsing mp4 clip with corrupted sample table atoms in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2020-3614 | 9.8 | Jun 22 | Possible buffer overflow while copying the frame to local buffer due to lack of check of length before copying in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
The 500 most important CVEs for this product (exploited first, then by severity)
