MF
Product
Mdm9250 Firmware
On CISA KEVExploited in the wild
195
CVEs
2
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 44High 135Medium 16Low 0
Watch
Add Mdm9250 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-1906 In wildKEV | 5.5 | May 7 | Qualcomm Multiple Chipsets Detection of Error Condition Without Action Vulnerability Affected: All versions, or not specified |
| CVE-2023-21629 | 6.8 | Jul 4 | Memory Corruption in Modem due to double free while parsing the PKCS15 sim files Affected: All versions, or not specified |
| CVE-2022-33289 | 6.8 | Apr 13 | Memory corruption occurs in Modem due to improper validation of array index when malformed APDU is sent from card Affected: All versions, or not specified |
| CVE-2020-11308 | 6.8 | Mar 17 | Buffer overflow occurs when trying to convert ASCII string to Unicode string if the actual size is more than required in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2023-28586 | 6.5 | Dec 5 | Information disclosure when the trusted application metadata symbol addresses are accessed while loading an ELF in TEE Affected: All versions, or not specified |
| CVE-2022-33286 | 6.5 | Jan 9 | Transient DOS due to buffer over-read in WLAN while processing 802.11 management frames Affected: All versions, or not specified |
| CVE-2022-33285 | 6.5 | Jan 9 | Transient DOS due to buffer over-read in WLAN while parsing WLAN CSA action frames Affected: All versions, or not specified |
| CVE-2021-30348 | 6.5 | Jan 3 | Improper validation of LLM utility timers availability can lead to denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2021-30342 | 5.9 | Jun 14 | Improper integrity check can lead to race condition between tasks PDCP and RRC? after a valid RRC Command packet has been received in Snapdragon Auto, Snapdragon Compute,… Affected: All versions, or not specified |
| CVE-2022-22076 | 5.5 | Jun 6 | information disclosure due to cryptographic issue in Core during RPMB read request Affected: All versions, or not specified |
| CVE-2022-22075 | 5.5 | Mar 10 | Information Disclosure in Graphics during GPU context switch Affected: All versions, or not specified |
| CVE-2021-1904 | 5.5 | Sep 8 | Child process can leak information from parent process due to numeric pids are getting compared and these pid can be reused in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2020-11221 | 5.5 | Mar 17 | Usage of syscall by non-secure entity can allow extraction of secure QTEE diagnostic information in clear text form due to insufficient checks in the syscall handler and leads to… Affected: All versions, or not specified |
| CVE-2020-11199 | 5.5 | Mar 17 | HLOS to access EL3 stack canary by just mapping imem region due to Improper access control and can lead to information exposure in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2020-11123 | 5.5 | Nov 12 | u'information disclosure in gatekeeper trustzone implementation as the throttling mechanism to prevent brute force attempts at getting user`s lock-screen password can be bypassed… Affected: All versions, or not specified |
| CVE-2022-22079 | 4.6 | Jan 9 | Denial of service while processing fastboot flash command on mmc due to buffer over read Affected: All versions, or not specified |
Showing 16
