cve.bz

qualcomm mdm9650 firmware vulnerabilities, newest first

Filter
  1. 7.8CVE-2025-27074EPSS 0.09%

    Memory corruption while processing a GP command response.

  2. 7.8CVE-2025-27053EPSS 0.09%

    Memory corruption during PlayReady APP usecase while processing TA commands.

  3. 7.8CVE-2025-27062EPSS 0.08%

    Memory corruption while handling client exceptions, allowing unauthorized channel access.

  4. 7.8CVE-2024-45562EPSS 0.1%

    Memory corruption during concurrent access to server info object due to unprotected critical field.

  5. 7.5CVE-2025-21429EPSS 0.3%

    Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request.

  6. 7.5CVE-2025-21428EPSS 0.3%

    Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request from the AP to establish a TSpec session.

  7. 7.8CVE-2024-43066EPSS 0.1%

    Memory corruption while handling file descriptor during listener registration/de-registration.

  8. 7.8CVE-2018-5852EPSS 0.1%

    An unsigned integer underflow vulnerability in IPA driver result into a buffer over-read while reading NAT entry using debugfs command 'cat /sys/kernel/debug/ipa/ip4_nat'

  9. 7.8CVE-2018-11952EPSS 0.1%

    An image with a version lower than the fuse version may potentially be booted lead to improper authentication.

  10. 5.5CVE-2018-11922EPSS 0.2%

    Wrong configuration in Touch Pal application can collect user behavior data without awareness by the user.

  11. 7.8CVE-2017-9711EPSS 0.1%

    Certain unprivileged processes are able to perform IOCTL calls.

  12. 7.8CVE-2024-38423EPSS 0.1%

    Memory corruption while processing GPU page table switch.

  13. 7.8CVE-2024-38422EPSS 0.1%

    Memory corruption while processing voice packet with arbitrary data received from ADSP.

  14. 7.8CVE-2024-33060EPSS 0.2%

    Memory corruption when two threads try to map and unmap a single node simultaneously.

  15. 7.5CVE-2024-33051EPSS 0.3%

    Transient DOS while processing TIM IE from beacon frame as there is no check for IE length.

  16. 7.8CVE-2024-23373EPSS 0.1%

    Memory corruption when IOMMU unmap operation fails, the DMA and anon buffers are getting released.

  17. 7.8CVE-2024-21461EPSS 0.1%

    Memory corruption while performing finish HMAC operation when context is freed by keymaster.

  18. 7.8CVE-2024-21471EPSS 0.1%

    Memory corruption when IOMMU unmap of a GPU buffer fails in Linux.

  19. 7.8CVE-2024-21468EPSS 0.1%

    Memory corruption when there is failed unmap operation in GPU.

  20. 7.8CVE-2023-33023EPSS 0.1%

    Memory corruption while processing finish_sign command to pass a rsp buffer.

  21. 7.8CVE-2023-28547EPSS 0.1%

    Memory corruption in SPS Application while requesting for public key in sorter TA.

  22. 7.8CVE-2023-33069EPSS 0.1%

    Memory corruption in Audio while processing the calibration data returned from ACDB loader.

  23. 7.8CVE-2023-33068EPSS 0.1%

    Memory corruption in Audio while processing IIR config data from AFE calibration block.

  24. 7.8CVE-2023-33067EPSS 0.1%

    Memory corruption in Audio while calling START command on host voice PCM multiple times for the same RX or TX tap points.

  25. 7.1CVE-2023-33065EPSS 0.1%

    Information disclosure in Audio while accessing AVCS services from ADSP payload.

  26. 5.5CVE-2023-33064EPSS 0.1%

    Transient DOS in Audio when invoking callback function of ASM driver.

  27. 7.8CVE-2023-33120EPSS 0.1%

    Memory corruption in Audio when memory map command is executed consecutively in ADSP.

  28. 7.8CVE-2023-33113EPSS 0.1%

    Memory corruption when resource manager sends the host kernel a reply message with multiple fragments.

  29. 7.5CVE-2023-33112EPSS 0.3%

    Transient DOS when WLAN firmware receives "reassoc response" frame including RIC_DATA element.

  30. 7.8CVE-2023-33033EPSS 0.1%

    Memory corruption in Audio during playback with speaker protection.

  31. 7.8CVE-2023-33030EPSS 0.1%

    Memory corruption in HLOS while running playready use-case.

  32. 7.8CVE-2023-33107KEVEPSS 0.7%

    Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.

  33. 7.8CVE-2023-33063KEVEPSS 0.7%

    Memory corruption in DSP Services during a remote call from HLOS to DSP.

  34. 7.8CVE-2023-33017EPSS 0.2%

    Memory corruption in Boot while running a ListVars test in UEFI Menu during boot.

  35. 6.5CVE-2023-28586EPSS 0.1%

    Information disclosure when the trusted application metadata symbol addresses are accessed while loading an ELF in TEE.

  36. 7.8CVE-2023-28546EPSS 0.1%

    Memory Corruption in SPS Application while exporting public key in sorter TA.

  37. 7.8CVE-2023-33059EPSS 0.1%

    Memory corruption in Audio while processing the VOC packet data from ADSP.

  38. 7.8CVE-2023-33031EPSS 0.1%

    Memory corruption in Automotive Audio while copying data from ADSP shared buffer to the VOC packet data buffer.

  39. 5.5CVE-2023-28563EPSS 0.1%

    Information disclosure in IOE Firmware while handling WMI command.

  40. 7.8CVE-2023-33035EPSS 0.1%

    Memory corruption while invoking callback function of AFE from ADSP.

  41. 5.5CVE-2023-28571EPSS 0.1%

    Information disclosure in WLAN HOST while processing the WLAN scan descriptor list during roaming scan.

  42. 7.5CVE-2023-24849EPSS 0.4%

    Information Disclosure in data Modem while parsing an FMTP line in an SDP message.

  43. 7.8CVE-2023-33021EPSS 0.1%

    Memory corruption in Graphics while processing user packets for command submission.

  44. 7.5CVE-2023-33020EPSS 0.4%

    Transient DOS in WLAN Host when an invalid channel (like channel out of range) is received in STA during CSA IE.

  45. 7.5CVE-2023-33019EPSS 0.4%

    Transient DOS in WLAN Host while doing channel switch announcement (CSA), when a mobile station receives invalid channel in CSA IE.

  46. 7.8CVE-2023-28564EPSS 0.1%

    Memory corruption in WLAN HAL while passing command parameters through WMI interfaces.

  47. 7.8CVE-2023-21649EPSS 0.1%

    Memory corruption in WLAN while running doDriverCmd for an unspecific command.

  48. 7.5CVE-2023-21625EPSS 0.4%

    Information disclosure in Network Services due to buffer over-read while the device receives DNS response.

  49. 9.8CVE-2022-40510EPSS 0.4%

    Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder.

  50. 7.8CVE-2023-28542EPSS 0.1%

    Memory Corruption in WLAN HOST while fetching TX status information.