MF
Product
Mdm9250 Firmware
by Qualcomm · last CVE Oct 6, 2026
On CISA KEVExploited in the wild
195
CVEs
2
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 44High 135Medium 16Low 0
Watch

Add Mdm9250 Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-1906
In wildKEV
5.5
1%
May 7
Qualcomm Multiple Chipsets Detection of Error Condition Without Action Vulnerability
Affected: All versions, or not specified
CVE-2023-21629
6.8
0%
Jul 4
Memory Corruption in Modem due to double free while parsing the PKCS15 sim files
Affected: All versions, or not specified
CVE-2022-33289
6.8
0%
Apr 13
Memory corruption occurs in Modem due to improper validation of array index when malformed APDU is sent from card
Affected: All versions, or not specified
CVE-2020-11308
6.8
0%
Mar 17
Buffer overflow occurs when trying to convert ASCII string to Unicode string if the actual size is more than required in Snapdragon Auto, Snapdragon Compute, Snapdragon…
Affected: All versions, or not specified
CVE-2023-28586
6.5
0%
Dec 5
Information disclosure when the trusted application metadata symbol addresses are accessed while loading an ELF in TEE
Affected: All versions, or not specified
CVE-2022-33286
6.5
0%
Jan 9
Transient DOS due to buffer over-read in WLAN while processing 802.11 management frames
Affected: All versions, or not specified
CVE-2022-33285
6.5
0%
Jan 9
Transient DOS due to buffer over-read in WLAN while parsing WLAN CSA action frames
Affected: All versions, or not specified
CVE-2021-30348
6.5
0%
Jan 3
Improper validation of LLM utility timers availability can lead to denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…
Affected: All versions, or not specified
CVE-2021-30342
5.9
0%
Jun 14
Improper integrity check can lead to race condition between tasks PDCP and RRC? after a valid RRC Command packet has been received in Snapdragon Auto, Snapdragon Compute,…
Affected: All versions, or not specified
CVE-2022-22076
5.5
0%
Jun 6
information disclosure due to cryptographic issue in Core during RPMB read request
Affected: All versions, or not specified
CVE-2022-22075
5.5
0%
Mar 10
Information Disclosure in Graphics during GPU context switch
Affected: All versions, or not specified
CVE-2021-1904
5.5
1%
Sep 8
Child process can leak information from parent process due to numeric pids are getting compared and these pid can be reused in Snapdragon Auto, Snapdragon Compute, Snapdragon…
Affected: All versions, or not specified
CVE-2020-11221
5.5
0%
Mar 17
Usage of syscall by non-secure entity can allow extraction of secure QTEE diagnostic information in clear text form due to insufficient checks in the syscall handler and leads to…
Affected: All versions, or not specified
CVE-2020-11199
5.5
0%
Mar 17
HLOS to access EL3 stack canary by just mapping imem region due to Improper access control and can lead to information exposure in Snapdragon Auto, Snapdragon Compute, Snapdragon…
Affected: All versions, or not specified
CVE-2020-11123
5.5
0%
Nov 12
u'information disclosure in gatekeeper trustzone implementation as the throttling mechanism to prevent brute force attempts at getting user`s lock-screen password can be bypassed…
Affected: All versions, or not specified
CVE-2022-22079
4.6
0%
Jan 9
Denial of service while processing fastboot flash command on mmc due to buffer over read
Affected: All versions, or not specified
Showing 16