MF
Product
Msm8909w Firmware
On CISA KEVExploited in the wild
621
CVEs
4
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 262High 237Medium 1Low 0
Watch
Add Msm8909w Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-33107 In wildKEV | 7.8 | Dec 5 | Integer Overflow or Wraparound in Graphics Linux Affected: 0 |
| CVE-2020-11261 In wildKEV | 7.8 | Jun 9 | Qualcomm Multiple Chipsets Improper Input Validation Vulnerability Affected: All versions, or not specified |
| CVE-2021-1905 In wildKEV | 7.8 | May 7 | Qualcomm Multiple Chipsets Use-After-Free Vulnerability Affected: All versions, or not specified |
| CVE-2022-33213 | 8.8 | Mar 10 | Memory corruption in modem due to buffer overflow while processing a PPP packet Affected: All versions, or not specified |
| CVE-2022-22088 | 8.8 | Jan 9 | Memory corruption in Bluetooth HOST due to buffer overflow while parsing the command response received from remote Affected: All versions, or not specified |
| CVE-2020-11177 | 8.8 | Feb 22 | User can overwrite Security Code NV item without knowing current SPC due to improper validation of SPC code setting and device lock in Snapdragon Auto, Snapdragon Compute,… Affected: All versions, or not specified |
| CVE-2018-11279 | 8.8 | Jan 18 | Lack of check of input size can make device memory get corrupted because of buffer overflow in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206,… Affected: All versions, or not specified |
| CVE-2018-11982 | 8.8 | Sep 20 | In Snapdragon (Mobile, Wear) in version MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD… Affected: All versions, or not specified |
| CVE-2018-5876 | 8.8 | Jul 6 | While parsing an mp4 file, a buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear Affected: All versions, or not specified |
| CVE-2018-5875 | 8.8 | Jul 6 | While parsing an mp4 file, an integer overflow leading to a buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear Affected: All versions, or not specified |
| CVE-2018-5874 | 8.8 | Jul 6 | While parsing an mp4 file, a stack-based buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear Affected: All versions, or not specified |
| CVE-2021-1949 | 8.4 | Oct 20 | Possible integer overflow due to improper check of batch count value while sanitizer is enabled in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2018-5891 | 8.4 | Jul 6 | While processing modem SSR after IMS is registered, the IMS data daemon is restarted but the ipc_dataHandle is no longer available Affected: All versions, or not specified |
| CVE-2024-45552 | 8.2 | Apr 7 | Information disclosure may occur during a video call if a device resets due to a non-conforming RTCP packet that doesn`t adhere to RFC standards Affected: All versions, or not specified |
| CVE-2018-13903 | 8.1 | Sep 8 | u'Error in UE due to race condition in EPCO handling' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon… Affected: All versions, or not specified |
| CVE-2019-10494 | 8.1 | Dec 12 | Race condition between the camera functions due to lack of resource lock which will lead to memory corruption and UAF issue in Snapdragon Auto, Snapdragon Consumer Electronics… Affected: All versions, or not specified |
| CVE-2019-10529 | 8.1 | Nov 6 | Possible use after free issue due to race condition while attempting to mark the entry pages as dirty using function set_page_dirty() in Snapdragon Auto, Snapdragon Compute,… Affected: All versions, or not specified |
| CVE-2016-10435 | 8.1 | Apr 18 | In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9625, MDM9635M, MDM9640,… Affected: All versions, or not specified |
| CVE-2016-10433 | 8.1 | Apr 18 | In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9635M, MDM9640, MDM9645, MSM8909W, SD… Affected: All versions, or not specified |
| CVE-2016-10417 | 8.1 | Apr 18 | In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear IPQ4019, MDM9206, MDM9607, MDM9625,… Affected: All versions, or not specified |
| CVE-2024-43052 | 7.8 | Dec 2 | Memory corruption while processing API calls to NPU with invalid input Affected: All versions, or not specified |
| CVE-2018-5852 | 7.8 | Nov 26 | An unsigned integer underflow vulnerability in IPA driver result into a buffer over-read while reading NAT entry using debugfs command 'cat /sys/kernel/debug/ipa/ip4_nat' Affected: All versions, or not specified |
| CVE-2018-11952 | 7.8 | Nov 26 | An image with a version lower than the fuse version may potentially be booted lead to improper authentication Affected: All versions, or not specified |
| CVE-2017-9711 | 7.8 | Nov 22 | Certain unprivileged processes are able to perform IOCTL calls Affected: All versions, or not specified |
| CVE-2024-33052 | 7.8 | Sep 2 | Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in FM Host Affected: 0 |
| CVE-2024-33042 | 7.8 | Sep 2 | Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in FM Host Affected: 0 |
| CVE-2024-21468 | 7.8 | Apr 1 | Memory corruption when there is failed unmap operation in GPU Affected: All versions, or not specified |
| CVE-2023-33066 | 7.8 | Mar 4 | Memory corruption in Audio while processing RT proxy port register driver Affected: All versions, or not specified |
| CVE-2023-33120 | 7.8 | Jan 2 | Memory corruption in Audio when memory map command is executed consecutively in ADSP Affected: All versions, or not specified |
| CVE-2023-33033 | 7.8 | Jan 2 | Memory corruption in Audio during playback with speaker protection Affected: All versions, or not specified |
| CVE-2023-33030 | 7.8 | Jan 2 | Memory corruption in HLOS while running playready use-case Affected: All versions, or not specified |
| CVE-2023-33018 | 7.8 | Dec 5 | Memory corruption while using the UIM diag command to get the operators name Affected: All versions, or not specified |
| CVE-2023-28551 | 7.8 | Dec 5 | Memory corruption in UTILS when modem processes memory specific Diag commands having arbitrary address values as input arguments Affected: All versions, or not specified |
| CVE-2023-28550 | 7.8 | Dec 5 | Memory corruption in MPP performance while accessing DSM watermark using external memory address Affected: All versions, or not specified |
| CVE-2023-33059 | 7.8 | Nov 7 | Memory corruption in Audio while processing the VOC packet data from ADSP Affected: All versions, or not specified |
| CVE-2023-28541 | 7.8 | Jul 4 | Memory Corruption in Data Modem while processing DMA buffer release event about CFR data Affected: All versions, or not specified |
| CVE-2022-33264 | 7.8 | Jun 6 | Memory corruption in modem due to stack based buffer overflow while parsing OTASP Key Generation Request Message Affected: All versions, or not specified |
| CVE-2023-21666 | 7.8 | May 2 | Memory Corruption in Graphics while accessing a buffer allocated through the graphics pool Affected: All versions, or not specified |
| CVE-2022-33302 | 7.8 | Apr 13 | Memory corruption due to improper validation of array index in User Identity Module when APN TLV length is greater than command length Affected: All versions, or not specified |
| CVE-2022-25705 | 7.8 | Mar 10 | Memory corruption in modem due to integer overflow to buffer overflow while handling APDU response Affected: All versions, or not specified |
| CVE-2022-25694 | 7.8 | Mar 10 | Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM Affected: All versions, or not specified |
| CVE-2022-33248 | 7.8 | Feb 12 | Memory corruption in User Identity Module due to integer overflow to buffer overflow when a segement is received via qmi http Affected: All versions, or not specified |
| CVE-2022-33233 | 7.8 | Feb 12 | Memory corruption due to configuration weakness in modem wile sending command to write protected files Affected: All versions, or not specified |
| CVE-2022-33266 | 7.8 | Jan 9 | Memory corruption in Audio due to integer overflow to buffer overflow while music playback of clips like amr,evrc,qcelp with modified content Affected: All versions, or not specified |
| CVE-2022-25695 | 7.8 | Dec 13 | Memory corruption in MODEM due to Improper Validation of Array Index while processing GSTK Proactive commands in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2022-25682 | 7.8 | Dec 13 | Memory corruption in MODEM UIM due to usage of out of range pointer offset while decoding command from card in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2022-25743 | 7.8 | Nov 15 | Memory corruption in graphics due to use-after-free while importing graphics buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2022-25724 | 7.8 | Nov 15 | Memory corruption in graphics due to buffer overflow while validating the user address in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2022-22058 | 7.8 | Sep 26 | Memory corruption due to use after free issue in kernel while processing ION handles in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2022-22074 | 7.8 | Sep 16 | Memory Corruption during wma file playback due to integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial… Affected: All versions, or not specified |
The 500 most important CVEs for this product (exploited first, then by severity)
