Qualcomm Mdm9250 vulnerabilities, page 3

211 vulnerabilities

Known vulnerabilities in Qualcomm Mdm9250, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.4CVE-2021-30337qualcommapq8009_firmware+209
EPSS score
0.15%
Possible use after free when process shell memory is freed using IOCTL call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
7.8CVE-2021-30259qualcommaqt1000_firmware+157
EPSS score
0.15%
Possible out of bound access due to improper validation of function table entries in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
7.8CVE-2021-30271qualcommapq8009w_firmware+165
EPSS score
0.15%
Possible null pointer dereference in trap handler due to lack of thread ID validation before dereferencing it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
7.8CVE-2021-30308qualcomm, inc.snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile+86
EPSS score
0.16%
Possible buffer overflow while printing the HARQ memory partition detail due to improper validation of buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
7.8CVE-2021-30255qualcomm, inc.snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables+188
EPSS score
0.16%
Possible buffer overflow due to improper input validation in PDM DIAG command in FTM in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
9.4CVE-2021-35083qualcommapq8009_firmware+173
EPSS score
0.53%
Possible out of bound read due to improper validation of certificate chain in SSL or Internet key exchange in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
7.8CVE-2021-35072qualcomm, inc.snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables+82
EPSS score
0.17%
Possible buffer overflow due to improper validation of array index while processing external DIAG command in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
8.4CVE-2021-35105qualcomm, inc.snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables+157
EPSS score
0.20%
Possible out of bounds access due to improper input validation during graphics profiling in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
7.8CVE-2021-35100qualcomm, inc.snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables+120
EPSS score
0.61%
Possible buffer over read due to improper calculation of string length while parsing Id3 tag in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
10CVE-2021-35104qualcommapq8009w_firmware+175
EPSS score
0.83%
Possible buffer overflow due to improper parsing of headers while playing the FLAC audio clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
7.5CVE-2025-21429qualcomm, inc.snapdragon+182
EPSS score
0.26%
Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request.
7.5CVE-2025-21428qualcomm, inc.snapdragon+69
EPSS score
0.26%
Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request from the AP to establish a TSpec session.
7.1CVE-2025-21482qualcomm, inc.snapdragon+287
EPSS score
0.09%
Cryptographic issue while performing RSA PKCS padding decoding.
7.8CVE-2025-47376qualcomm, inc.snapdragon+165
EPSS score
0.07%
Memory Corruption when concurrent access to shared buffer occurs during IOCTL calls.
7.8CVE-2025-47379qualcomm, inc.snapdragon+173
EPSS score
0.07%
Memory Corruption when concurrent access to shared buffer occurs due to improper synchronization between assignment and deallocation of buffer resources.
7.8CVE-2025-47375qualcomm, inc.snapdragon+164
EPSS score
0.07%
Memory corruption while handling different IOCTL calls from the user-space simultaneously.
7.8CVE-2025-47320qualcomm, inc.snapdragon+212
EPSS score
0.08%
Memory corruption while processing MFC channel configuration during music playback.
7.8CVE-2025-47404qualcomm, inc.snapdragon+183
EPSS score
0.07%
Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified.
7.8CVE-2025-47386qualcomm, inc.snapdragon+165
EPSS score
0.07%
Memory Corruption while invoking IOCTL calls when concurrent access to shared buffer occurs.
7.2CVE-2025-47383qualcomm, inc.snapdragon+200
EPSS score
0.14%
Weak configuration may lead to cryptographic issue when a VoWiFi call is triggered from UE.