MF
Product
Mdm9206 Firmware
On CISA KEVExploited in the wild
734
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 292High 207Medium 1Low 0
Watch
Add Mdm9206 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-13888 | 7.8 | Feb 11 | There is potential for memory corruption in the RIL daemon due to de reference of memory outside the allocated array length in RIL in Snapdragon Auto, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2018-11899 | 7.8 | Feb 11 | While processing radio connection status change events, Radio index is not properly validated in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2018-11847 | 7.8 | Feb 11 | Malicious TA can tag QSEE kernel memory and map to EL0, there by corrupting the physical memory as well it can be used to corrupt the QSEE kernel and compromise the whole TEE in… Affected: All versions, or not specified |
| CVE-2018-5869 | 7.8 | Jan 18 | Improper input validation in the QTEE keymaster app can lead to invalid memory access in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MSM8909W, SD 210/SD… Affected: All versions, or not specified |
| CVE-2018-5880 | 7.8 | Jan 18 | Improper data length check while processing an event report indication can lead to a buffer overflow in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, SD… Affected: All versions, or not specified |
| CVE-2018-5867 | 7.8 | Jan 18 | Lack of checking input size can lead to buffer overflow In WideVine in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9635M,… Affected: All versions, or not specified |
| CVE-2018-11288 | 7.8 | Jan 18 | Possible undefined behavior due to lack of size check in function for parameter segment_idx can lead to a read outside of the intended region in snapdragon automobile, snapdragon… Affected: All versions, or not specified |
The 500 most important CVEs for this product (exploited first, then by severity)