MF
Product
Msm8909w Firmware
by Qualcomm · last CVE Apr 7, 2025
On CISA KEVExploited in the wild
621
CVEs
4
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 262High 237Medium 1Low 0
Watch

Add Msm8909w Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-33107
In wildKEV
7.8
1%
Dec 5
Integer Overflow or Wraparound in Graphics Linux
Affected: 0
CVE-2020-11261
In wildKEV
7.8
2%
Jun 9
Qualcomm Multiple Chipsets Improper Input Validation Vulnerability
Affected: All versions, or not specified
CVE-2021-1905
In wildKEV
7.8
2%
May 7
Qualcomm Multiple Chipsets Use-After-Free Vulnerability
Affected: All versions, or not specified
CVE-2022-33213
8.8
0%
Mar 10
Memory corruption in modem due to buffer overflow while processing a PPP packet
Affected: All versions, or not specified
CVE-2022-22088
8.8
1%
Jan 9
Memory corruption in Bluetooth HOST due to buffer overflow while parsing the command response received from remote
Affected: All versions, or not specified
CVE-2020-11177
8.8
0%
Feb 22
User can overwrite Security Code NV item without knowing current SPC due to improper validation of SPC code setting and device lock in Snapdragon Auto, Snapdragon Compute,…
Affected: All versions, or not specified
CVE-2018-11279
8.8
1%
Jan 18
Lack of check of input size can make device memory get corrupted because of buffer overflow in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206,…
Affected: All versions, or not specified
CVE-2018-11982
8.8
0%
Sep 20
In Snapdragon (Mobile, Wear) in version MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD…
Affected: All versions, or not specified
CVE-2018-5876
8.8
1%
Jul 6
While parsing an mp4 file, a buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear
Affected: All versions, or not specified
CVE-2018-5875
8.8
1%
Jul 6
While parsing an mp4 file, an integer overflow leading to a buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear
Affected: All versions, or not specified
CVE-2018-5874
8.8
1%
Jul 6
While parsing an mp4 file, a stack-based buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear
Affected: All versions, or not specified
CVE-2021-1949
8.4
0%
Oct 20
Possible integer overflow due to improper check of batch count value while sanitizer is enabled in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
Affected: All versions, or not specified
CVE-2018-5891
8.4
0%
Jul 6
While processing modem SSR after IMS is registered, the IMS data daemon is restarted but the ipc_dataHandle is no longer available
Affected: All versions, or not specified
CVE-2024-45552
8.2
0%
Apr 7
Information disclosure may occur during a video call if a device resets due to a non-conforming RTCP packet that doesn`t adhere to RFC standards
Affected: All versions, or not specified
CVE-2018-13903
8.1
1%
Sep 8
u'Error in UE due to race condition in EPCO handling' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon…
Affected: All versions, or not specified
CVE-2019-10494
8.1
0%
Dec 12
Race condition between the camera functions due to lack of resource lock which will lead to memory corruption and UAF issue in Snapdragon Auto, Snapdragon Consumer Electronics…
Affected: All versions, or not specified
CVE-2019-10529
8.1
2%
Nov 6
Possible use after free issue due to race condition while attempting to mark the entry pages as dirty using function set_page_dirty() in Snapdragon Auto, Snapdragon Compute,…
Affected: All versions, or not specified
CVE-2016-10435
8.1
1%
Apr 18
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9625, MDM9635M, MDM9640,…
Affected: All versions, or not specified
CVE-2016-10433
8.1
1%
Apr 18
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9635M, MDM9640, MDM9645, MSM8909W, SD…
Affected: All versions, or not specified
CVE-2016-10417
8.1
1%
Apr 18
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear IPQ4019, MDM9206, MDM9607, MDM9625,…
Affected: All versions, or not specified
CVE-2024-43052
7.8
0%
Dec 2
Memory corruption while processing API calls to NPU with invalid input
Affected: All versions, or not specified
CVE-2018-5852
7.8
0%
Nov 26
An unsigned integer underflow vulnerability in IPA driver result into a buffer over-read while reading NAT entry using debugfs command 'cat /sys/kernel/debug/ipa/ip4_nat'
Affected: All versions, or not specified
CVE-2018-11952
7.8
0%
Nov 26
An image with a version lower than the fuse version may potentially be booted lead to improper authentication
Affected: All versions, or not specified
CVE-2017-9711
7.8
0%
Nov 22
Certain unprivileged processes are able to perform IOCTL calls
Affected: All versions, or not specified
CVE-2024-33052
7.8
0%
Sep 2
Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in FM Host
Affected: 0
CVE-2024-33042
7.8
0%
Sep 2
Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in FM Host
Affected: 0
CVE-2024-21468
7.8
0%
Apr 1
Memory corruption when there is failed unmap operation in GPU
Affected: All versions, or not specified
CVE-2023-33066
7.8
0%
Mar 4
Memory corruption in Audio while processing RT proxy port register driver
Affected: All versions, or not specified
CVE-2023-33120
7.8
0%
Jan 2
Memory corruption in Audio when memory map command is executed consecutively in ADSP
Affected: All versions, or not specified
CVE-2023-33033
7.8
0%
Jan 2
Memory corruption in Audio during playback with speaker protection
Affected: All versions, or not specified
CVE-2023-33030
7.8
0%
Jan 2
Memory corruption in HLOS while running playready use-case
Affected: All versions, or not specified
CVE-2023-33018
7.8
0%
Dec 5
Memory corruption while using the UIM diag command to get the operators name
Affected: All versions, or not specified
CVE-2023-28551
7.8
0%
Dec 5
Memory corruption in UTILS when modem processes memory specific Diag commands having arbitrary address values as input arguments
Affected: All versions, or not specified
CVE-2023-28550
7.8
0%
Dec 5
Memory corruption in MPP performance while accessing DSM watermark using external memory address
Affected: All versions, or not specified
CVE-2023-33059
7.8
0%
Nov 7
Memory corruption in Audio while processing the VOC packet data from ADSP
Affected: All versions, or not specified
CVE-2023-28541
7.8
0%
Jul 4
Memory Corruption in Data Modem while processing DMA buffer release event about CFR data
Affected: All versions, or not specified
CVE-2022-33264
7.8
0%
Jun 6
Memory corruption in modem due to stack based buffer overflow while parsing OTASP Key Generation Request Message
Affected: All versions, or not specified
CVE-2023-21666
7.8
0%
May 2
Memory Corruption in Graphics while accessing a buffer allocated through the graphics pool
Affected: All versions, or not specified
CVE-2022-33302
7.8
0%
Apr 13
Memory corruption due to improper validation of array index in User Identity Module when APN TLV length is greater than command length
Affected: All versions, or not specified
CVE-2022-25705
7.8
0%
Mar 10
Memory corruption in modem due to integer overflow to buffer overflow while handling APDU response
Affected: All versions, or not specified
CVE-2022-25694
7.8
0%
Mar 10
Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM
Affected: All versions, or not specified
CVE-2022-33248
7.8
0%
Feb 12
Memory corruption in User Identity Module due to integer overflow to buffer overflow when a segement is received via qmi http
Affected: All versions, or not specified
CVE-2022-33233
7.8
0%
Feb 12
Memory corruption due to configuration weakness in modem wile sending command to write protected files
Affected: All versions, or not specified
CVE-2022-33266
7.8
0%
Jan 9
Memory corruption in Audio due to integer overflow to buffer overflow while music playback of clips like amr,evrc,qcelp with modified content
Affected: All versions, or not specified
CVE-2022-25695
7.8
0%
Dec 13
Memory corruption in MODEM due to Improper Validation of Array Index while processing GSTK Proactive commands in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
Affected: All versions, or not specified
CVE-2022-25682
7.8
0%
Dec 13
Memory corruption in MODEM UIM due to usage of out of range pointer offset while decoding command from card in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
Affected: All versions, or not specified
CVE-2022-25743
7.8
0%
Nov 15
Memory corruption in graphics due to use-after-free while importing graphics buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…
Affected: All versions, or not specified
CVE-2022-25724
7.8
0%
Nov 15
Memory corruption in graphics due to buffer overflow while validating the user address in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…
Affected: All versions, or not specified
CVE-2022-22058
7.8
0%
Sep 26
Memory corruption due to use after free issue in kernel while processing ION handles in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…
Affected: All versions, or not specified
CVE-2022-22074
7.8
0%
Sep 16
Memory Corruption during wma file playback due to integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial…
Affected: All versions, or not specified
Page 1 of 5 · 237 total
12…5
The 500 most important CVEs for this product (exploited first, then by severity)