Read the docs

Qualcomm

Records3060All Threatist records
Exploited (KEV)12In CISA KEV
CVSS critical678CVSS 9.0–10.0
CVSS high1984CVSS 7.0–8.9

Exploited now

Qualcomm records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

110 records in Mdm8207 Firmware · all components

TI-2022-14640 CVE-2022-33211 · GHSA-c2xr-v86f-v878

Improper Input Validation in MODEM

Priority MEDIUM 49

memory corruption in modem due to improper check while calculating size of serialized CoAP message

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00417 Published 2023-04-04 No fix listed CWE-20
Priority MEDIUM 49

Memory corruption in modem due to buffer overwrite while building an IPv6 multicast address based on the MAC address of the iface

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00417 Published 2023-04-04 No fix listed CWE-120
Priority MEDIUM 47

Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00256 Published 2024-06-03 No fix listed CWE-287
Priority MEDIUM 44

Improper buffer size validation of DSM packet received can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT,…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00827 Published 2022-06-14 No fix listed CWE-787
Priority MEDIUM 44

Possible heap overflow due to improper length check of domain while parsing the DNS response in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00869 Published 2021-11-12 No fix listed CWE-787
Priority MEDIUM 44

Memory corruption while processing crafted SDES packets due to improper length check in sdes packets recieved in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industria…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00819 Published 2021-05-07 No fix listed CWE-190
Priority MEDIUM 44

Out of bound write while parsing RTT/TTY packet parsing due to lack of check of buffer size before copying into buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00911 Published 2021-03-17 No fix listed CWE-129
Priority MEDIUM 44

Out of bound write while parsing SDP string due to missing check on null termination in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Sn…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01099 Published 2021-03-17 No fix listed CWE-787
Priority MEDIUM 44

Out of bound memory access while playing music playbacks with crafted vorbis content due to improper checks in header extraction in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, S…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00834 Published 2021-02-22 No fix listed CWE-120
Priority MEDIUM 43

Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00427 Published 2023-08-08 No fix listed CWE-457
Priority MEDIUM 43

Integer underflow can occur due to improper handling of incoming RTCP packets in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdrago…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00796 Published 2021-09-08 No fix listed CWE-191
Priority MEDIUM 43

Integer underflow can occur when the RTCP length is lesser than than the actual blocks present in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdrag…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00796 Published 2021-09-08 No fix listed CWE-191
Priority MEDIUM 43

Possible buffer underflow due to lack of check for negative indices values when processing user provided input in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industri…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00796 Published 2021-09-08 No fix listed CWE-787
TI-2023-08645 CVE-2023-22385 · GHSA-4vv2-435c-33ch

Buffer Over-read in Data Modem

Priority MEDIUM 42

Memory Corruption in Data Modem while making a MO call or MT VOLTE call.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00422 Published 2023-10-03 No fix listed CWE-126
TI-2022-19222 CVE-2022-40505 · GHSA-4p3h-qrpg-h7hr

Buffer over-read in Modem

Priority MEDIUM 42

Information disclosure due to buffer over-read in Modem while parsing DNS hostname.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00354 Published 2023-05-02 No fix listed CWE-126
TI-2022-14713 CVE-2022-33291 · GHSA-fh2p-qw35-q7r4

Buffer over-read in Modem

Priority MEDIUM 42

Information disclosure in Modem due to buffer over-read while receiving a IP header with malformed length.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00354 Published 2023-04-04 No fix listed CWE-126
TI-2022-14709 CVE-2022-33287 · GHSA-vccr-c5vf-xh9r

Buffer over-read in Modem

Priority MEDIUM 42

Information disclosure in Modem due to buffer over-read while getting length of Unfragmented headers in an IPv6 packet.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00354 Published 2023-04-04 No fix listed CWE-126
Priority MEDIUM 42

Memory corruption due to buffer copy without checking the size of input in modem while decoding raw SMS received.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00417 Published 2023-04-04 No fix listed CWE-120
TI-2022-14682 CVE-2022-33258 · GHSA-v784-rfch-9wq8

Buffer over-read in Modem

Priority MEDIUM 42

Information disclosure due to buffer over-read in modem while reading configuration parameters.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00354 Published 2023-04-04 No fix listed CWE-126
TI-2022-14656 CVE-2022-33229 · GHSA-6rw9-xp67-2fp9

Buffer over-read in Modem

Priority MEDIUM 42

Information disclosure due to buffer over-read in Modem while using static array to process IPv4 packets.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00375 Published 2023-02-09 No fix listed CWE-126
TI-2022-09321 CVE-2022-25747 · GHSA-cvqv-3452-5q34

Buffer Over-read in MODEM

Priority MEDIUM 42

Information disclosure in modem due to improper input validation during parsing of upcoming CoAP message

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00354 Published 2023-04-04 No fix listed CWE-126
TI-2022-09307 CVE-2022-25732 · GHSA-hh45-w5qf-pxvx

Buffer Over-read in MODEM

Priority MEDIUM 42

Information disclosure in modem due to buffer over read in dns client due to missing length check

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00375 Published 2023-02-09 No fix listed CWE-126
TI-2022-09305 CVE-2022-25730 · GHSA-xhc7-32vm-6c85

Buffer Over-read in MODEM

Priority MEDIUM 42

Information disclosure in modem due to improper check of IP type while processing DNS server query

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00354 Published 2023-04-04 No fix listed CWE-126
Load more
Open these records in search →