MF
Product
Msm8909w Firmware
On CISA KEVExploited in the wild
623
CVEs
4
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 262High 237Medium 1Low 0
Watch
Add Msm8909w Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-10512 | 7.8 | Nov 6 | Payload size is not checked before using it as array index in audio in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT,… Affected: All versions, or not specified |
| CVE-2019-10502 | 7.8 | Nov 6 | Possible stack overflow when an index equal to io buffer size is accessed in camera module in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2019-10496 | 7.8 | Nov 6 | Lack of checking a variable received from driver and populating in Firmware data structure leads to buffer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2019-10491 | 7.8 | Nov 6 | ADSP can be compromised since it`s a general-purpose CPU processing untrusted data in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT,… Affected: All versions, or not specified |
| CVE-2019-2341 | 7.8 | Sep 30 | Buffer overflow when the audio buffer size provided by user is larger than the maximum allowable audio buffer size Affected: All versions, or not specified |
| CVE-2019-2333 | 7.8 | Sep 30 | Buffer overflow due to improper validation of buffer size while IPA driver processing to perform read operation in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2019-10508 | 7.8 | Sep 30 | Lack of input validation for data received from user space can lead to OOB access in WLAN in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2019-10501 | 7.8 | Sep 30 | Possible use after free issue due to improper input validation in volume listener library in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial… Affected: All versions, or not specified |
| CVE-2019-10498 | 7.8 | Sep 30 | Buffer overflow scenario if the client sends more than 5 io_vec requests to the server in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT,… Affected: All versions, or not specified |
| CVE-2019-10497 | 7.8 | Sep 30 | Use after free issue occurs If another instance of open for voice_svc node has been called from application without closing the previous one Affected: All versions, or not specified |
| CVE-2019-10492 | 7.8 | Sep 30 | Boot image not getting verified by AVB in Snapdragon Auto, Snapdragon Mobile, Snapdragon Wearables in MDM9607, MSM8909W, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD… Affected: All versions, or not specified |
| CVE-2019-2328 | 7.8 | Jul 25 | Possible buffer overflow when number of channels passed is more than size of channel mapping array in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2019-2326 | 7.8 | Jul 25 | Data token is received from ADSP and is used without validation as an index into the array leads to out of bound access in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2019-2308 | 7.8 | Jul 25 | User application could potentially make RPC call to the fastrpc driver and the driver will allow the message to go through to the remote subsystem in Snapdragon Auto, Snapdragon… Affected: All versions, or not specified |
| CVE-2019-2306 | 7.8 | Jul 25 | Improper casting of structure while handling the buffer leads to out of bound read in display in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2019-2301 | 7.8 | Jul 25 | Possibility of out-of-bound read if id received from SPI is not in range of FIFO in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT,… Affected: All versions, or not specified |
| CVE-2019-2298 | 7.8 | Jul 25 | Protection is missing while accessing md sessions info via macro which can lead to use-after-free in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2019-2293 | 7.8 | Jul 25 | Pointer dereference while freeing IFE resources due to lack of length check of in port resource Affected: All versions, or not specified |
| CVE-2019-2290 | 7.8 | Jul 25 | Multiple open and close from multiple threads will lead camera driver to access destroyed session data pointer in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2019-2272 | 7.8 | Jul 25 | Buffer overflow can occur in display function due to lack of validation of header block size set by user Affected: All versions, or not specified |
| CVE-2019-2263 | 7.8 | Jul 25 | Access to freed memory can happen while reading from diag driver due to use after free issue in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2019-2264 | 7.8 | Jul 22 | Null pointer dereference occurs for channel context while opening glink channel in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Voice & Music,… Affected: All versions, or not specified |
| CVE-2019-2257 | 7.8 | Jun 14 | Wrong permissions in configuration file can lead to unauthorized permission in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,… Affected: All versions, or not specified |
| CVE-2018-5913 | 7.8 | Jun 14 | A non-time constant function memcmp is used which creates a side channel that could leak information in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2018-3583 | 7.8 | Jun 14 | A buffer overflow can occur while processing an extscan hotlist event in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2018-13919 | 7.8 | Jun 14 | Use-after-free vulnerability will occur if reset of the routing table encounters an invalid rule id while processing command to reset in Snapdragon Auto, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2018-13908 | 7.8 | Jun 14 | Truncated access authentication token leads to weakened access control for stored secure application data in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2018-11939 | 7.8 | Jun 14 | Use after issue in WLAN function due to multiple ACS scan requests at a time in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9150,… Affected: All versions, or not specified |
| CVE-2019-2248 | 7.8 | May 24 | Buffer overflow can occur if invalid header tries to overwrite the existing buffer which fix size allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2019-2247 | 7.8 | May 24 | Possibility of double free issue while running multiple instances of smp2p test because of proper protection is missing while using global variable in Snapdragon Auto, Snapdragon… Affected: All versions, or not specified |
| CVE-2018-13920 | 7.8 | May 24 | Use-after-free condition due to Improper handling of hrtimers when the PMU driver tries to access its events in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial… Affected: All versions, or not specified |
| CVE-2018-13899 | 7.8 | May 24 | Processing messages after error may result in user after free memory fault in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2018-13895 | 7.8 | May 24 | Due to the missing permissions on several content providers of the RCS app in its android manifest file will lead to an unprivileged access to phone in Snapdragon Auto, Snapdragon… Affected: All versions, or not specified |
| CVE-2018-11967 | 7.8 | May 24 | Signature verification of the skel library could potentially be disabled as the memory region on the remote subsystem in which the library is loaded is allocated from userspace… Affected: All versions, or not specified |
| CVE-2017-18279 | 7.8 | May 6 | Lack of check of buffer length before copying can lead to buffer overflow in camera module in Small Cell SoC, Snapdragon Mobile, Snapdragon Wear in FSM9055, FSM9955, IPQ4019,… Affected: All versions, or not specified |
| CVE-2017-18157 | 7.8 | May 6 | A Use After Free Condition can occur in Thermal Engine in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD… Affected: All versions, or not specified |
| CVE-2018-13918 | 7.8 | Apr 4 | kernel could return a received message length higher than expected, which leads to buffer overflow in a subsequent operation and stops normal operation in Snapdragon Auto,… Affected: All versions, or not specified |
| CVE-2018-11966 | 7.8 | Apr 4 | Undefined behavior in UE while processing unknown IEI in OTA message in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile,… Affected: All versions, or not specified |
| CVE-2018-13914 | 7.8 | Feb 25 | Lack of input validation for data received from user space can lead to an out of bound array issue in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT,… Affected: All versions, or not specified |
| CVE-2018-13913 | 7.8 | Feb 25 | Improper validation of array index can lead to unauthorized access while processing debugFS in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT,… Affected: All versions, or not specified |
| CVE-2018-13905 | 7.8 | Feb 25 | KGSL syncsource lock not handled properly during syncsource cleanup can lead to use after free issue in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT,… Affected: All versions, or not specified |
| CVE-2018-13900 | 7.8 | Feb 25 | Use-after-free vulnerability will occur as there is no protection for the route table`s rule in IPA driver in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT,… Affected: All versions, or not specified |
| CVE-2018-11938 | 7.8 | Feb 25 | Improper input validation for argument received from HLOS can lead to buffer overflows and unexpected behavior in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2018-13888 | 7.8 | Feb 11 | There is potential for memory corruption in the RIL daemon due to de reference of memory outside the allocated array length in RIL in Snapdragon Auto, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2018-11847 | 7.8 | Feb 11 | Malicious TA can tag QSEE kernel memory and map to EL0, there by corrupting the physical memory as well it can be used to corrupt the QSEE kernel and compromise the whole TEE in… Affected: All versions, or not specified |
| CVE-2018-5869 | 7.8 | Jan 18 | Improper input validation in the QTEE keymaster app can lead to invalid memory access in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MSM8909W, SD 210/SD… Affected: All versions, or not specified |
| CVE-2017-18330 | 7.8 | Jan 3 | Buffer overflow in AES-CCM and AES-GCM encryption via initialization vector in snapdragon automobile, snapdragon mobile and snapdragon wear in versions IPQ8074, MDM9206, MDM9607,… Affected: All versions, or not specified |
| CVE-2017-18329 | 7.8 | Jan 3 | Possible Buffer overflow when transmitting an RTP packet in snapdragon automobile and snapdragon wear in versions MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655,… Affected: All versions, or not specified |
| CVE-2017-18328 | 7.8 | Jan 3 | Use after free in QSH client rule processing in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD… Affected: All versions, or not specified |
| CVE-2018-5918 | 7.8 | Nov 28 | Possible buffer overflow in DRM Trusted application due to lack of check function return values in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions… Affected: All versions, or not specified |
The 500 most important CVEs for this product (exploited first, then by severity)