Read the docs

Qualcomm

Records3060All Threatist records
Exploited (KEV)12In CISA KEV
CVSS critical678CVSS 9.0–10.0
CVSS high1984CVSS 7.0–8.9

Exploited now

Qualcomm records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

84 records in Mdm9207 Firmware · all components

TI-2022-14640 CVE-2022-33211 · GHSA-c2xr-v86f-v878

Improper Input Validation in MODEM

Priority MEDIUM 49

memory corruption in modem due to improper check while calculating size of serialized CoAP message

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00417 Published 2023-04-04 No fix listed CWE-20
Priority MEDIUM 49

Memory corruption in modem due to buffer overwrite while building an IPv6 multicast address based on the MAC address of the iface

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00417 Published 2023-04-04 No fix listed CWE-120
Priority MEDIUM 44

Improper buffer size validation of DSM packet received can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT,…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00827 Published 2022-06-14 No fix listed CWE-787
Priority MEDIUM 44

Possible heap overflow due to improper length check of domain while parsing the DNS response in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00869 Published 2021-11-12 No fix listed CWE-787
Priority MEDIUM 44

Memory corruption while processing crafted SDES packets due to improper length check in sdes packets recieved in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industria…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00819 Published 2021-05-07 No fix listed CWE-190
Priority MEDIUM 44

Out of bound write while parsing RTT/TTY packet parsing due to lack of check of buffer size before copying into buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00911 Published 2021-03-17 No fix listed CWE-129
Priority MEDIUM 44

Out of bound write while parsing SDP string due to missing check on null termination in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Sn…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01099 Published 2021-03-17 No fix listed CWE-787
Priority MEDIUM 44

Out of bound memory access while playing music playbacks with crafted vorbis content due to improper checks in header extraction in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, S…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00834 Published 2021-02-22 No fix listed CWE-120
Priority MEDIUM 43

Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00427 Published 2023-08-08 No fix listed CWE-457
Priority MEDIUM 43

Integer underflow can occur due to improper handling of incoming RTCP packets in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdrago…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00796 Published 2021-09-08 No fix listed CWE-191
Priority MEDIUM 43

Integer underflow can occur when the RTCP length is lesser than than the actual blocks present in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdrag…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00796 Published 2021-09-08 No fix listed CWE-191
Priority MEDIUM 43

Possible buffer underflow due to lack of check for negative indices values when processing user provided input in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industri…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00796 Published 2021-09-08 No fix listed CWE-787
Priority MEDIUM 42

Memory corruption due to buffer copy without checking the size of input in modem while decoding raw SMS received.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00417 Published 2023-04-04 No fix listed CWE-120
TI-2022-14682 CVE-2022-33258 · GHSA-v784-rfch-9wq8

Buffer over-read in Modem

Priority MEDIUM 42

Information disclosure due to buffer over-read in modem while reading configuration parameters.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00354 Published 2023-04-04 No fix listed CWE-126
TI-2022-14656 CVE-2022-33229 · GHSA-6rw9-xp67-2fp9

Buffer over-read in Modem

Priority MEDIUM 42

Information disclosure due to buffer over-read in Modem while using static array to process IPv4 packets.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00375 Published 2023-02-09 No fix listed CWE-126
TI-2022-09321 CVE-2022-25747 · GHSA-cvqv-3452-5q34

Buffer Over-read in MODEM

Priority MEDIUM 42

Information disclosure in modem due to improper input validation during parsing of upcoming CoAP message

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00354 Published 2023-04-04 No fix listed CWE-126
TI-2022-09307 CVE-2022-25732 · GHSA-hh45-w5qf-pxvx

Buffer Over-read in MODEM

Priority MEDIUM 42

Information disclosure in modem due to buffer over read in dns client due to missing length check

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00375 Published 2023-02-09 No fix listed CWE-126
TI-2022-09305 CVE-2022-25730 · GHSA-xhc7-32vm-6c85

Buffer Over-read in MODEM

Priority MEDIUM 42

Information disclosure in modem due to improper check of IP type while processing DNS server query

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00354 Published 2023-04-04 No fix listed CWE-126
TI-2022-09303 CVE-2022-25728 · GHSA-3j56-76c6-9xf6

Buffer Over-read in MODEM

Priority MEDIUM 42

Information disclosure in modem due to buffer over-read while processing response from DNS server

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00375 Published 2023-02-09 No fix listed CWE-126
TI-2022-09301 CVE-2022-25726 · GHSA-rfgf-82hw-xm75

Buffer Over-read in MODEM

Priority MEDIUM 42

Information disclosure in modem data due to array out of bound access while handling the incoming DNS response packet

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00354 Published 2023-04-04 No fix listed CWE-126
TI-2022-09314 CVE-2022-25739 · GHSA-gwwh-g689-9jvg

Null Point Dereference in MODEM

Priority MEDIUM 41

Denial of service in modem due to missing null check while processing the ipv6 packet received during ECM call

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00383 Published 2023-04-04 No fix listed CWE-476
Priority MEDIUM 41

Buffer over-read while unpacking the RTCP packet we may read extra byte if wrong length is provided in RTCP packets in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Ind…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00913 Published 2021-05-07 No fix listed CWE-125
Priority MEDIUM 41

Out-of-bounds read vulnerability while accessing DTMF payload due to lack of check of buffer length before copying in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Indu…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00944 Published 2021-04-07 No fix listed CWE-125
Load more
Open these records in search →