MF
Product
Mdm9628 Firmware
by Qualcomm · last CVE Oct 6, 2026
On CISA KEVExploited in the wild
238
CVEs
2
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 42High 174Medium 22Low 0
Watch

Add Mdm9628 Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-1905
In wildKEV
7.8
2%
May 7
Qualcomm Multiple Chipsets Use-After-Free Vulnerability
Affected: All versions, or not specified
CVE-2021-1906
In wildKEV
5.5
1%
May 7
Qualcomm Multiple Chipsets Detection of Error Condition Without Action Vulnerability
Affected: All versions, or not specified
CVE-2023-22388
9.8
0%
Nov 7
Memory Corruption in Multi-mode Call Processor while processing bit mask API
Affected: All versions, or not specified
CVE-2023-22385
9.8
0%
Oct 3
Memory Corruption in Data Modem while making a MO call or MT VOLTE call
Affected: All versions, or not specified
CVE-2022-40510
9.8
0%
Aug 8
Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder
Affected: All versions, or not specified
CVE-2023-21631
9.8
0%
Jul 4
Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network
Affected: All versions, or not specified
CVE-2022-40537
9.8
0%
Mar 10
Memory corruption in Bluetooth HOST while processing the AVRC_PDU_GET_PLAYER_APP_VALUE_TEXT AVRCP response
Affected: All versions, or not specified
CVE-2022-40515
9.8
0%
Mar 10
Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms
Affected: All versions, or not specified
CVE-2022-25720
9.8
1%
Oct 19
Memory corruption in WLAN due to out of bound array access during connect/roaming in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics…
Affected: All versions, or not specified
CVE-2022-25687
9.8
0%
Oct 19
memory corruption in video due to buffer overflow while parsing asf clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon…
Affected: All versions, or not specified
CVE-2022-25718
9.8
0%
Oct 19
Cryptographic issue in WLAN due to improper check on return value while authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics…
Affected: All versions, or not specified
CVE-2022-25748
9.8
1%
Oct 19
Memory corruption in WLAN due to integer overflow to buffer overflow while parsing GTK frames
Affected: All versions, or not specified
CVE-2022-25688
9.8
0%
Sep 16
Memory corruption in video due to buffer overflow while parsing ps video clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon…
Affected: All versions, or not specified
CVE-2022-22105
9.8
1%
Sep 16
Memory corruption in bluetooth due to integer overflow while processing HFP-UNIT profile in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Voice & Music
Affected: All versions, or not specified
CVE-2022-25668
9.8
0%
Sep 2
Memory corruption in video driver due to double free while parsing ASF clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon…
Affected: All versions, or not specified
CVE-2022-25659
9.8
0%
Sep 2
Memory corruption due to buffer overflow while parsing MKV clips with invalid bitmap size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…
Affected: All versions, or not specified
CVE-2022-25651
9.8
1%
Jun 14
Memory corruption in bluetooth host due to integer overflow while processing BT HFP-UNIT profile in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon…
Affected: All versions, or not specified
CVE-2022-22087
9.8
1%
Jun 14
memory corruption in video due to buffer overflow while parsing mkv clip with no codechecker in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…
Affected: All versions, or not specified
CVE-2021-35104
9.8
1%
Jun 14
Possible buffer overflow due to improper parsing of headers while playing the FLAC audio clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…
Affected: All versions, or not specified
CVE-2021-30341
9.8
1%
Jun 14
Improper buffer size validation of DSM packet received can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…
Affected: All versions, or not specified
CVE-2021-30351
9.8
4%
Jan 3
An out of bound memory access can occur due to improper validation of number of frames being passed during music playback in Snapdragon Auto, Snapdragon Compute, Snapdragon…
Affected: All versions, or not specified
CVE-2021-1975
9.8
1%
Nov 12
Possible heap overflow due to improper length check of domain while parsing the DNS response in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…
Affected: All versions, or not specified
CVE-2021-1976
9.8
1%
Sep 17
A use after free can occur due to improper validation of P2P device address in PD Request frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
Affected: All versions, or not specified
CVE-2021-1920
9.8
1%
Sep 8
Integer underflow can occur due to improper handling of incoming RTCP packets in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon…
Affected: All versions, or not specified
CVE-2021-1919
9.8
1%
Sep 8
Integer underflow can occur when the RTCP length is lesser than than the actual blocks present in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…
Affected: All versions, or not specified
CVE-2021-1916
9.8
1%
Sep 8
Possible buffer underflow due to lack of check for negative indices values when processing user provided input in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
Affected: All versions, or not specified
CVE-2020-11279
9.8
1%
May 7
Memory corruption while processing crafted SDES packets due to improper length check in sdes packets recieved in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
Affected: All versions, or not specified
CVE-2020-11227
9.8
1%
Mar 17
Out of bound write while parsing RTT/TTY packet parsing due to lack of check of buffer size before copying into buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon…
Affected: All versions, or not specified
CVE-2020-11192
9.8
1%
Mar 17
Out of bound write while parsing SDP string due to missing check on null termination in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…
Affected: All versions, or not specified
CVE-2020-11170
9.8
1%
Feb 22
Out of bound memory access while playing music playbacks with crafted vorbis content due to improper checks in header extraction in Snapdragon Auto, Snapdragon Compute, Snapdragon…
Affected: All versions, or not specified
CVE-2020-3639
9.8
1%
Nov 12
u'When a non standard SIP sigcomp message is received from the network, then there may be chances of using more UDVM cycle or memory overflow' in Snapdragon Auto, Snapdragon…
Affected: All versions, or not specified
CVE-2022-22062
9.1
0%
Sep 2
An out-of-bounds read can occur while parsing a server certificate due to improper length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
Affected: All versions, or not specified
CVE-2021-35083
9.1
1%
Jun 14
Possible out of bound read due to improper validation of certificate chain in SSL or Internet key exchange in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
Affected: All versions, or not specified
CVE-2021-30284
9.1
1%
Nov 12
Possible information exposure and denial of service due to NAS not dropping messages when integrity check fails in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
Affected: All versions, or not specified
CVE-2021-1977
9.1
1%
Oct 20
Possible buffer over read due to improper validation of frame length while processing AEAD decryption during ASSOC response in Snapdragon Auto, Snapdragon Compute, Snapdragon…
Affected: All versions, or not specified
CVE-2020-11285
9.1
1%
May 7
Buffer over-read while unpacking the RTCP packet we may read extra byte if wrong length is provided in RTCP packets in Snapdragon Auto, Snapdragon Compute, Snapdragon…
Affected: All versions, or not specified
CVE-2020-11251
9.1
1%
Apr 7
Out-of-bounds read vulnerability while accessing DTMF payload due to lack of check of buffer length before copying in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
Affected: All versions, or not specified
CVE-2020-11191
9.1
1%
Apr 7
Out of bound read occurs while processing crafted SDP due to lack of check of null string in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…
Affected: All versions, or not specified
CVE-2020-11190
9.1
1%
Mar 17
Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
Affected: All versions, or not specified
CVE-2020-11189
9.1
1%
Mar 17
Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
Affected: All versions, or not specified
CVE-2020-11188
9.1
1%
Mar 17
Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
Affected: All versions, or not specified
CVE-2020-11171
9.1
1%
Mar 17
Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
Affected: All versions, or not specified
CVE-2020-11166
9.1
1%
Mar 17
Potential out of bound read exception when UE receives unusually large number of padding octets in the beginning of ROHC header in Snapdragon Auto, Snapdragon Compute, Snapdragon…
Affected: All versions, or not specified
CVE-2020-11275
9.1
1%
Feb 22
Possible buffer over-read while parsing quiet IE in Rx beacon frame due to improper check of IE length in received beacon in Snapdragon Auto, Snapdragon Compute, Snapdragon…
Affected: All versions, or not specified
CVE-2023-28572
8.8
0%
Nov 7
Memory corruption in WLAN HOST while processing the WLAN scan descriptor list
Affected: All versions, or not specified
CVE-2022-33213
8.8
0%
Mar 10
Memory corruption in modem due to buffer overflow while processing a PPP packet
Affected: All versions, or not specified
CVE-2022-33280
8.8
0%
Feb 12
Memory corruption due to access of uninitialized pointer in Bluetooth HOST while processing the AVRCP packet
Affected: All versions, or not specified
CVE-2020-11177
8.8
0%
Feb 22
User can overwrite Security Code NV item without knowing current SPC due to improper validation of SPC code setting and device lock in Snapdragon Auto, Snapdragon Compute,…
Affected: All versions, or not specified
CVE-2020-11303
8.6
1%
Oct 20
Accepting AMSDU frames with mismatched destination and source address can lead to information disclosure in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer…
Affected: All versions, or not specified
CVE-2021-1949
8.4
0%
Oct 20
Possible integer overflow due to improper check of batch count value while sanitizer is enabled in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
Affected: All versions, or not specified
Page 1 of 5 · 238 total
12…5