MF
Product
Mdm9640 Firmware
by Qualcomm · last CVE Dec 18, 2025
481
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 170High 266Medium 45Low 0
Watch

Add Mdm9640 Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-33059
7.8
0%
Nov 7
Buffer Copy Without Checking Size of Input in Audio
Affected: All versions, or not specified
CVE-2023-33031
7.8
0%
Nov 7
Buffer Copy Without Checking Size of Input in Automotive Audio
Affected: All versions, or not specified
CVE-2023-28565
7.8
0%
Sep 5
Improper Validation of Array Index in WLAN HAL
Affected: All versions, or not specified
CVE-2023-28564
7.8
0%
Sep 5
Use of Out-of-range Pointer Offset in WLAN HAL
Affected: All versions, or not specified
CVE-2023-28560
7.8
0%
Sep 5
Buffer Copy Without Checking Size of Input in WLAN HAL
Affected: All versions, or not specified
CVE-2023-28541
7.8
0%
Jul 4
Buffer Over-read in WLAN Host
Affected: 0
CVE-2023-21628
7.8
0%
Jun 6
Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN HAL
Affected: All versions, or not specified
CVE-2022-33264
7.8
0%
Jun 6
Stack-based buffer overflow in Modem
Affected: 0
CVE-2022-33302
7.8
0%
Apr 4
Improper validation of array index in User Identity Module
Affected: All versions, or not specified
CVE-2022-40531
7.8
0%
Mar 7
Incorrect type conversion in WLAN
Affected: All versions, or not specified
CVE-2022-25705
7.8
0%
Mar 7
Integer Overflow to Buffer Overflow in Modem
Affected: All versions, or not specified
CVE-2022-25694
7.8
0%
Mar 7
Use of Out-of-range Pointer Offset in MODEM
Affected: All versions, or not specified
CVE-2022-25655
7.8
0%
Mar 7
Buffer copy without checking the size of input in WLAN HAL.
Affected: All versions, or not specified
CVE-2022-33233
7.8
0%
Feb 9
Configuration weakness in modem
Affected: All versions, or not specified
CVE-2022-40520
7.8
1%
Jan 6
Stack based buffer overflow in Core
Affected: All versions, or not specified
CVE-2022-22063
7.8
0%
Dec 14
Memory corruption in Core
Affected: All versions, or not specified
CVE-2022-25682
7.8
0%
Dec 13
Memory corruption in MODEM UIM due to usage of out of range pointer offset while decoding command from card in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
Affected: All versions, or not specified
CVE-2022-25695
7.8
0%
Dec 13
Memory corruption in MODEM due to Improper Validation of Array Index while processing GSTK Proactive commands in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
Affected: All versions, or not specified
CVE-2022-22058
7.8
0%
Sep 26
Memory corruption due to use after free issue in kernel while processing ION handles in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…
Affected: All versions, or not specified
CVE-2022-22074
7.8
0%
Sep 16
Memory Corruption during wma file playback due to integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial…
Affected: All versions, or not specified
CVE-2022-22080
7.8
0%
Sep 2
Improper validation of backend id in PCM routing process can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…
Affected: All versions, or not specified
CVE-2021-35072
7.8
0%
Jun 14
Possible buffer overflow due to improper validation of array index while processing external DIAG command in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…
Affected: All versions, or not specified
CVE-2021-30333
7.8
0%
Apr 1
Improper validation of buffer size input to the EFS file can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…
Affected: All versions, or not specified
CVE-2021-30323
7.8
0%
Feb 11
Improper validation of maximum size of data write to EFS file can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial…
Affected: All versions, or not specified
CVE-2021-30319
7.8
0%
Jan 13
Possible integer overflow due to improper validation of command length parameters while processing WMI command in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
Affected: All versions, or not specified
CVE-2021-30337
7.8
0%
Jan 3
Possible use after free when process shell memory is freed using IOCTL call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute, Snapdragon…
Affected: All versions, or not specified
CVE-2021-30303
7.8
0%
Jan 3
Possible buffer overflow due to lack of buffer length check when segmented WMI command is received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
Affected: All versions, or not specified
CVE-2021-30289
7.8
0%
Jan 3
Possible buffer overflow due to lack of range check while processing a DIAG command for COEX management in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon…
Affected: All versions, or not specified
CVE-2021-30272
7.8
0%
Jan 3
Possible null pointer dereference in thread cache operation handler due to lack of validation of user provided input in Snapdragon Auto, Snapdragon Compute, Snapdragon…
Affected: All versions, or not specified
CVE-2021-30271
7.8
0%
Jan 3
Possible null pointer dereference in trap handler due to lack of thread ID validation before dereferencing it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
Affected: All versions, or not specified
CVE-2021-30270
7.8
0%
Jan 3
Possible null pointer dereference in thread profile trap handler due to lack of thread ID validation before dereferencing it in Snapdragon Auto, Snapdragon Compute, Snapdragon…
Affected: All versions, or not specified
CVE-2021-30268
7.8
0%
Jan 3
Possible heap Memory Corruption Issue due to lack of input validation when sending HWTC IQ Capture command in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
Affected: All versions, or not specified
CVE-2021-30262
7.8
0%
Jan 3
Improper validation of a socket state when socket events are being sent to clients can lead to invalid access of memory in Snapdragon Auto, Snapdragon Compute, Snapdragon…
Affected: All versions, or not specified
CVE-2021-30255
7.8
0%
Nov 12
Possible buffer overflow due to improper input validation in PDM DIAG command in FTM in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…
Affected: All versions, or not specified
CVE-2021-30254
7.8
0%
Nov 12
Possible buffer overflow due to improper input validation in factory calibration and test DIAG command in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
Affected: All versions, or not specified
CVE-2021-1973
7.8
0%
Nov 12
A FTM Diag command can allow an arbitrary write into modem OS space in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial…
Affected: All versions, or not specified
CVE-2021-1959
7.8
0%
Oct 20
Possible memory corruption due to lack of bound check of input index in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon…
Affected: All versions, or not specified
CVE-2021-30261
7.8
0%
Sep 17
Possible integer and heap overflow due to lack of input command size validation while handling beacon template update command from HLOS in Snapdragon Auto, Snapdragon Consumer…
Affected: All versions, or not specified
CVE-2021-30260
7.8
0%
Sep 17
Possible Integer overflow to buffer overflow issue can occur due to improper validation of input parameters when extscan hostlist configuration command is received in Snapdragon…
Affected: All versions, or not specified
CVE-2021-1890
7.8
0%
Jul 13
Improper length check of public exponent in RSA import key function could cause memory corruption
Affected: All versions, or not specified
CVE-2021-1889
7.8
0%
Jul 13
Possible buffer overflow due to lack of length check in Trusted Application in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon…
Affected: All versions, or not specified
CVE-2021-1888
7.8
0%
Jul 13
Memory corruption in key parsing and import function due to double freeing the same heap allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
Affected: All versions, or not specified
CVE-2021-1886
7.8
0%
Jul 13
Incorrect handling of pointers in trusted application key import mechanism could cause memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
Affected: All versions, or not specified
CVE-2020-11292
7.8
1%
Jun 9
Possible buffer overflow in voice service due to lack of input validation of parameters in QMI Voice API in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
Affected: All versions, or not specified
CVE-2020-11267
7.8
0%
Jun 9
Stack out-of-bounds write occurs while setting up a cipher device if the provided IV length exceeds the max limit value in Snapdragon Auto, Snapdragon Compute, Snapdragon…
Affected: All versions, or not specified
CVE-2020-11289
7.8
0%
May 7
Out of bound write can occur in TZ command handler due to lack of validation of command ID in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…
Affected: All versions, or not specified
CVE-2020-11234
7.8
0%
Apr 7
When sending a socket event message to a user application, invalid information will be passed if socket is freed by other thread resulting in a Use After Free condition in…
Affected: All versions, or not specified
CVE-2020-11204
7.8
0%
Feb 22
Possible memory corruption and information leakage in sub-system due to lack of check for validity and boundary compliance for parameters that are read from shared MSG RAM in…
Affected: All versions, or not specified
CVE-2020-11195
7.8
0%
Feb 22
Out of bound write and read in TA while processing command from NS side due to improper length check on command and response buffers in Snapdragon Auto, Snapdragon Compute,…
Affected: All versions, or not specified
CVE-2020-11131
7.8
0%
Nov 12
u'Possible buffer overflow in WMA message processing due to integer overflow occurs when processing command received from user space' in Snapdragon Auto, Snapdragon Consumer IOT,…
Affected: All versions, or not specified
Page 5 of 10 · 481 total
1…456…10