MF
Product
Msm8917 Firmware
by Qualcomm · last CVE Aug 8, 2023
On CISA KEVExploited in the wild
306
CVEs
3
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 117High 163Medium 26Low 0
Watch

Add Msm8917 Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-11261
In wildKEV
7.8
2%
Jun 9
Qualcomm Multiple Chipsets Improper Input Validation Vulnerability
Affected: All versions, or not specified
CVE-2021-1905
In wildKEV
7.8
2%
May 7
Qualcomm Multiple Chipsets Use-After-Free Vulnerability
Affected: All versions, or not specified
CVE-2022-33213
8.8
0%
Mar 10
Memory corruption in modem due to buffer overflow while processing a PPP packet
Affected: All versions, or not specified
CVE-2020-11177
8.8
0%
Feb 22
User can overwrite Security Code NV item without knowing current SPC due to improper validation of SPC code setting and device lock in Snapdragon Auto, Snapdragon Compute,…
Affected: All versions, or not specified
CVE-2021-1949
8.4
0%
Oct 20
Possible integer overflow due to improper check of batch count value while sanitizer is enabled in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
Affected: All versions, or not specified
CVE-2021-1917
8.4
0%
Oct 20
Null pointer dereference can occur due to memory allocation failure in DIAG in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon…
Affected: All versions, or not specified
CVE-2020-11260
8.4
0%
Jun 9
An improper free of uninitialized memory can occur in DIAG services in Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile
Affected: All versions, or not specified
CVE-2018-13903
8.1
1%
Sep 8
u'Error in UE due to race condition in EPCO handling' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon…
Affected: All versions, or not specified
CVE-2019-10494
8.1
0%
Dec 12
Race condition between the camera functions due to lack of resource lock which will lead to memory corruption and UAF issue in Snapdragon Auto, Snapdragon Consumer Electronics…
Affected: All versions, or not specified
CVE-2023-28537
7.8
0%
Aug 8
Memory corruption while allocating memory in COmxApeDec module in Audio
Affected: All versions, or not specified
CVE-2023-22666
7.8
0%
Aug 8
Memory Corruption in Audio while playing amrwbplus clips with modified content
Affected: All versions, or not specified
CVE-2022-25705
7.8
0%
Mar 10
Memory corruption in modem due to integer overflow to buffer overflow while handling APDU response
Affected: All versions, or not specified
CVE-2022-25694
7.8
0%
Mar 10
Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM
Affected: All versions, or not specified
CVE-2022-33248
7.8
0%
Feb 12
Memory corruption in User Identity Module due to integer overflow to buffer overflow when a segement is received via qmi http
Affected: All versions, or not specified
CVE-2022-33233
7.8
0%
Feb 12
Memory corruption due to configuration weakness in modem wile sending command to write protected files
Affected: All versions, or not specified
CVE-2022-25695
7.8
0%
Dec 13
Memory corruption in MODEM due to Improper Validation of Array Index while processing GSTK Proactive commands in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
Affected: All versions, or not specified
CVE-2022-25682
7.8
0%
Dec 13
Memory corruption in MODEM UIM due to usage of out of range pointer offset while decoding command from card in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
Affected: All versions, or not specified
CVE-2022-25743
7.8
0%
Nov 15
Memory corruption in graphics due to use-after-free while importing graphics buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…
Affected: All versions, or not specified
CVE-2022-25724
7.8
0%
Nov 15
Memory corruption in graphics due to buffer overflow while validating the user address in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…
Affected: All versions, or not specified
CVE-2022-22058
7.8
0%
Sep 26
Memory corruption due to use after free issue in kernel while processing ION handles in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…
Affected: All versions, or not specified
CVE-2022-22074
7.8
0%
Sep 16
Memory Corruption during wma file playback due to integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial…
Affected: All versions, or not specified
CVE-2022-22059
7.8
0%
Sep 2
Memory corruption due to out of bound read while parsing a video file in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
Affected: All versions, or not specified
CVE-2022-22085
7.8
0%
Jun 14
Memory corruption in video due to buffer overflow while reading the dts file in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon…
Affected: All versions, or not specified
CVE-2022-22084
7.8
0%
Jun 14
Memory corruption when extracting qcp audio file due to lack of check on data length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…
Affected: All versions, or not specified
CVE-2022-22082
7.8
0%
Jun 14
Memory corruption due to possible buffer overflow while parsing DSF header with corrupted channel count in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
Affected: All versions, or not specified
CVE-2021-35072
7.8
0%
Jun 14
Possible buffer overflow due to improper validation of array index while processing external DIAG command in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…
Affected: All versions, or not specified
CVE-2021-30255
7.8
0%
Nov 12
Possible buffer overflow due to improper input validation in PDM DIAG command in FTM in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…
Affected: All versions, or not specified
CVE-2021-30254
7.8
0%
Nov 12
Possible buffer overflow due to improper input validation in factory calibration and test DIAG command in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
Affected: All versions, or not specified
CVE-2021-1973
7.8
0%
Nov 12
A FTM Diag command can allow an arbitrary write into modem OS space in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial…
Affected: All versions, or not specified
CVE-2021-30292
7.8
0%
Oct 20
Possible memory corruption due to lack of validation of client data used for memory allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…
Affected: All versions, or not specified
CVE-2021-30291
7.8
0%
Oct 20
Possible memory corruption due to lack of validation of client data used for memory allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…
Affected: All versions, or not specified
CVE-2021-30258
7.8
0%
Oct 20
Possible buffer overflow due to improper size calculation of payload received in VR service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…
Affected: All versions, or not specified
CVE-2021-30257
7.8
0%
Oct 20
Possible out of bound read or write in VR service due to lack of validation of DSP selection values in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…
Affected: All versions, or not specified
CVE-2021-30256
7.8
0%
Oct 20
Possible stack overflow due to improper validation of camera name length before copying the name in VR Service in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…
Affected: All versions, or not specified
CVE-2021-1984
7.8
0%
Oct 20
Possible buffer overflow due to improper validation of index value while processing the plugin block in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
Affected: All versions, or not specified
CVE-2021-1983
7.8
0%
Oct 20
Possible buffer overflow due to improper handling of negative data length while processing write request in VR service in Snapdragon Auto, Snapdragon Compute, Snapdragon…
Affected: All versions, or not specified
CVE-2021-1959
7.8
0%
Oct 20
Possible memory corruption due to lack of bound check of input index in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon…
Affected: All versions, or not specified
CVE-2021-30261
7.8
0%
Sep 17
Possible integer and heap overflow due to lack of input command size validation while handling beacon template update command from HLOS in Snapdragon Auto, Snapdragon Consumer…
Affected: All versions, or not specified
CVE-2021-30295
7.8
0%
Sep 9
Possible heap overflow due to improper validation of local variable while storing current task information locally in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
Affected: All versions, or not specified
CVE-2021-1934
7.8
0%
Sep 9
Possible memory corruption due to improper check when application loader object is explicitly destructed while application is unloading in Snapdragon Auto, Snapdragon Compute,…
Affected: All versions, or not specified
CVE-2021-1890
7.8
0%
Jul 13
Improper length check of public exponent in RSA import key function could cause memory corruption
Affected: All versions, or not specified
CVE-2021-1889
7.8
0%
Jul 13
Possible buffer overflow due to lack of length check in Trusted Application in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon…
Affected: All versions, or not specified
CVE-2021-1888
7.8
0%
Jul 13
Memory corruption in key parsing and import function due to double freeing the same heap allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
Affected: All versions, or not specified
CVE-2021-1886
7.8
0%
Jul 13
Incorrect handling of pointers in trusted application key import mechanism could cause memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
Affected: All versions, or not specified
CVE-2020-11292
7.8
1%
Jun 9
Possible buffer overflow in voice service due to lack of input validation of parameters in QMI Voice API in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
Affected: All versions, or not specified
CVE-2020-11267
7.8
0%
Jun 9
Stack out-of-bounds write occurs while setting up a cipher device if the provided IV length exceeds the max limit value in Snapdragon Auto, Snapdragon Compute, Snapdragon…
Affected: All versions, or not specified
CVE-2020-11240
7.8
0%
Jun 9
Memory corruption due to ioctl command size was incorrectly set to the size of a pointer and not enough storage is allocated for the copy of the user argument in Snapdragon Auto,…
Affected: All versions, or not specified
CVE-2020-11239
7.8
0%
Jun 9
Use after free issue when importing a DMA buffer by using the CPU address of the buffer due to attachment is not cleaned up properly in Snapdragon Auto, Snapdragon Compute,…
Affected: All versions, or not specified
CVE-2021-1927
7.8
0%
May 7
Possible use after free due to lack of null check while memory is being freed in FastRPC driver in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
Affected: All versions, or not specified
CVE-2021-1895
7.8
0%
May 7
Possible integer overflow due to improper length check while flashing an image in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music
Affected: All versions, or not specified
Page 1 of 4 · 163 total
12…4