MF
Product
Mdm9607 Firmware
by Qualcomm · last CVE Nov 26, 2024
On CISA KEVExploited in the wild
731
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 262High 237Medium 1Low 0
Watch

Add Mdm9607 Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-10622
9.1
1%
Apr 16
Out of bound memory access can happen while parsing ADSP message due to lack of check of size of payload received from userspace in Snapdragon Auto, Snapdragon Compute, Snapdragon…
Affected: All versions, or not specified
CVE-2019-10610
9.1
1%
Apr 16
Possible buffer over read when trying to process SDP message Video media line with frame-size attribute in video Media line in Snapdragon Auto, Snapdragon Compute, Snapdragon…
Affected: All versions, or not specified
CVE-2019-10551
9.1
1%
Apr 16
String error while processing non standard SIP messages received can lead to buffer overread and then denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer…
Affected: All versions, or not specified
CVE-2019-14082
9.1
1%
Mar 5
Potential buffer over-read due to lack of bound check of memory offset passed in WLAN firmware in Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon…
Affected: All versions, or not specified
CVE-2019-10577
9.1
1%
Mar 5
Improper input validation while processing SIP URI received from the network will lead to buffer over-read and then to denial of service in Snapdragon Auto, Snapdragon Compute,…
Affected: All versions, or not specified
CVE-2019-10554
9.1
1%
Mar 5
Multiple Read overflows issue due to improper length check while decoding Identity Request in CSdomain/Authentication Reject in CS domain/ PRAU accept/while logging DL message in…
Affected: All versions, or not specified
CVE-2019-10553
9.1
1%
Mar 5
Multiple Read overflows due to improper length checks while decoding authentication in Cs domain/RAU Reject and TC cmd in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer…
Affected: All versions, or not specified
CVE-2019-10552
9.1
1%
Mar 5
Multiple Buffer Over-read issue can happen due to improper length checks while decoding Service Reject/RAU Reject/PTMSI Realloc cmd in Snapdragon Auto, Snapdragon Compute,…
Affected: All versions, or not specified
CVE-2019-10550
9.1
1%
Mar 5
Buffer Over-read when UE is trying to process the message received form the network without zero termination in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT,…
Affected: All versions, or not specified
CVE-2019-14063
9.1
1%
Feb 7
Out of bound access due to Invalid inputs to dapm mux settings which results into kernel failure in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon…
Affected: All versions, or not specified
CVE-2019-14057
9.1
1%
Feb 7
Buffer Over read of codec private data while parsing an mkv file due to lack of check of buffer size before read in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
Affected: All versions, or not specified
CVE-2019-10579
9.1
1%
Jan 21
Buffer over-read can occur while playing the video clip which is not standard in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon…
Affected: All versions, or not specified
CVE-2018-13906
9.1
1%
Jun 14
The HMAC authenticating the message from QSEE is vulnerable to timing side channel analysis leading to potentially forged application message in Snapdragon Auto, Snapdragon…
Affected: All versions, or not specified
CVE-2016-10492
9.1
1%
Apr 18
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9615, MDM9635M, MDM9640, MDM9645, MDM9650,…
Affected: All versions, or not specified
CVE-2022-33213
8.8
0%
Mar 10
Memory corruption in modem due to buffer overflow while processing a PPP packet
Affected: All versions, or not specified
CVE-2020-11177
8.8
0%
Feb 22
User can overwrite Security Code NV item without knowing current SPC due to improper validation of SPC code setting and device lock in Snapdragon Auto, Snapdragon Compute,…
Affected: All versions, or not specified
CVE-2018-5881
8.8
0%
Jan 18
Improper validation of buffer length checks in the lwm2m device management protocol can leads to a buffer overflow in snapdragon mobile and snapdragon wear in versions MDM9206,…
Affected: All versions, or not specified
CVE-2018-11279
8.8
1%
Jan 18
Lack of check of input size can make device memory get corrupted because of buffer overflow in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206,…
Affected: All versions, or not specified
CVE-2018-5879
8.8
0%
Jan 18
Improper length check while processing an MQTT message can lead to heap overflow in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, SD 210/SD 212/SD 205, SD…
Affected: All versions, or not specified
CVE-2018-11993
8.8
0%
Jan 18
Improper check while accessing the local memory stack on MQTT connection request can lead to buffer overflow in snapdragon wear in versions MDM9206, MDM9607
Affected: All versions, or not specified
CVE-2018-11982
8.8
0%
Sep 20
In Snapdragon (Mobile, Wear) in version MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD…
Affected: All versions, or not specified
CVE-2018-5876
8.8
1%
Jul 6
While parsing an mp4 file, a buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear
Affected: All versions, or not specified
CVE-2018-5875
8.8
1%
Jul 6
While parsing an mp4 file, an integer overflow leading to a buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear
Affected: All versions, or not specified
CVE-2018-5874
8.8
1%
Jul 6
While parsing an mp4 file, a stack-based buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear
Affected: All versions, or not specified
CVE-2020-11303
8.6
1%
Oct 20
Accepting AMSDU frames with mismatched destination and source address can lead to information disclosure in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer…
Affected: All versions, or not specified
CVE-2021-1949
8.4
0%
Oct 20
Possible integer overflow due to improper check of batch count value while sanitizer is enabled in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
Affected: All versions, or not specified
CVE-2018-5884
8.4
0%
Jul 6
Improper Access Control in Multimedia in Snapdragon Mobile and Snapdragon Wear, Non-standard applications without permission may acquire permission of Qualcomm-specific…
Affected: All versions, or not specified
CVE-2022-33268
8.1
0%
Dec 13
Information disclosure due to buffer over-read in Bluetooth HOST while pairing and connecting A2DP
Affected: All versions, or not specified
CVE-2019-10494
8.1
0%
Dec 12
Race condition between the camera functions due to lack of resource lock which will lead to memory corruption and UAF issue in Snapdragon Auto, Snapdragon Consumer Electronics…
Affected: All versions, or not specified
CVE-2019-10529
8.1
2%
Nov 6
Possible use after free issue due to race condition while attempting to mark the entry pages as dirty using function set_page_dirty() in Snapdragon Auto, Snapdragon Compute,…
Affected: All versions, or not specified
CVE-2016-10417
8.1
1%
Apr 18
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear IPQ4019, MDM9206, MDM9607, MDM9625,…
Affected: All versions, or not specified
CVE-2018-5852
7.8
0%
Nov 26
Buffer Over-read in IPA
Affected: 0
CVE-2018-11952
7.8
0%
Nov 26
Improper Authentication in TrustZone
Affected: All versions, or not specified
CVE-2017-15832
7.8
0%
Nov 26
Buffer overwrite due to improper input validation in WLAN host
Affected: All versions, or not specified
CVE-2016-10394
7.8
0%
Nov 26
Improper Authentication in Core
Affected: All versions, or not specified
CVE-2017-9711
7.8
0%
Nov 22
Permissions, Privileges, and Access Controls in Data
Affected: 0
CVE-2022-40531
7.8
0%
Mar 10
Memory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID message
Affected: All versions, or not specified
CVE-2022-25705
7.8
0%
Mar 10
Memory corruption in modem due to integer overflow to buffer overflow while handling APDU response
Affected: All versions, or not specified
CVE-2022-25694
7.8
0%
Mar 10
Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM
Affected: All versions, or not specified
CVE-2022-25655
7.8
0%
Mar 10
Memory corruption in WLAN HAL while arbitrary value is passed in WMI UTF command payload
Affected: All versions, or not specified
CVE-2022-33233
7.8
0%
Feb 12
Memory corruption due to configuration weakness in modem wile sending command to write protected files
Affected: All versions, or not specified
CVE-2022-33266
7.8
0%
Jan 9
Memory corruption in Audio due to integer overflow to buffer overflow while music playback of clips like amr,evrc,qcelp with modified content
Affected: All versions, or not specified
CVE-2022-25695
7.8
0%
Dec 13
Memory corruption in MODEM due to Improper Validation of Array Index while processing GSTK Proactive commands in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
Affected: All versions, or not specified
CVE-2022-25682
7.8
0%
Dec 13
Memory corruption in MODEM UIM due to usage of out of range pointer offset while decoding command from card in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
Affected: All versions, or not specified
CVE-2022-25743
7.8
0%
Nov 15
Memory corruption in graphics due to use-after-free while importing graphics buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…
Affected: All versions, or not specified
CVE-2022-25724
7.8
0%
Nov 15
Memory corruption in graphics due to buffer overflow while validating the user address in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…
Affected: All versions, or not specified
CVE-2022-22058
7.8
0%
Sep 26
Memory corruption due to use after free issue in kernel while processing ION handles in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…
Affected: All versions, or not specified
CVE-2022-22074
7.8
0%
Sep 16
Memory Corruption during wma file playback due to integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial…
Affected: All versions, or not specified
CVE-2022-22085
7.8
0%
Jun 14
Memory corruption in video due to buffer overflow while reading the dts file in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon…
Affected: All versions, or not specified
CVE-2022-22084
7.8
0%
Jun 14
Memory corruption when extracting qcp audio file due to lack of check on data length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…
Affected: All versions, or not specified
Page 6 of 10 · 500 total
1…567…10
The 500 most important CVEs for this product (exploited first, then by severity)