Qualcomm Mdm9330 vulnerabilities, page 3
67 vulnerabilities
Known vulnerabilities in Qualcomm Mdm9330, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2020-11177qualcomm, inc. · snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables +407 morequalcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearablesUser can overwrite Security Code NV item without knowing current SPC due to improper validation of SPC code setting and device lock in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesEPSS0.17%CriticalCVE-2020-3686qualcomm · apq8009_firmware +491 morequalcomm apq8009_firmwarePossible memory out of bound issue during music playback when an incorrect bit stream content is copied into array without checking the length of array in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingEPSS1.21%HighCVE-2020-3685qualcomm · apq8009_firmware +505 morequalcomm apq8009_firmwarePointer variable which is freed is not cleared can result in memory corruption and leads to denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingEPSS0.93%CriticalCVE-2020-3691qualcomm · apq8009_firmware +505 morequalcomm apq8009_firmwarePossible out of bound memory access in audio due to integer underflow while processing modified contents in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingEPSS1.07%HighCVE-2022-40521qualcomm, inc. · snapdragon +242 moreImproper authorization in ModemTransient DOS due to improper authorization in ModemEPSS0.35%HighCVE-2022-25705qualcomm, inc. · snapdragon +201 moreInteger Overflow to Buffer Overflow in ModemMemory corruption in modem due to integer overflow to buffer overflow while handling APDU responseEPSS0.13%HighCVE-2022-25655qualcomm, inc. · snapdragon +238 moreBuffer copy without checking the size of input in WLAN HAL.Memory corruption in WLAN HAL while arbitrary value is passed in WMI UTF command payload.EPSS0.12%HighCVE-2022-25695qualcomm, inc. · snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables +197 morequalcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearablesMemory corruption in MODEM due to Improper Validation of Array Index while processing GSTK Proactive commands in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesEPSS0.13%HighCVE-2022-25694qualcomm, inc. · snapdragon +208 moreUse of Out-of-range Pointer Offset in MODEMMemory corruption in Modem due to usage of Out-of-range pointer offset in UIMEPSS0.12%CriticalCVE-2022-25720qualcomm · apq8009_firmware +184 morequalcomm apq8009_firmwareMemory corruption in WLAN due to out of bound array access during connect/roaming in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesEPSS0.50%HighCVE-2022-25682qualcomm, inc. · snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables +204 morequalcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearablesMemory corruption in MODEM UIM due to usage of out of range pointer offset while decoding command from card in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesEPSS0.13%CriticalCVE-2022-25719qualcomm · apq8009_firmware +117 morequalcomm apq8009_firmwareInformation disclosure in WLAN due to improper length check while processing authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingEPSS0.56%HighCVE-2022-33264qualcomm, inc. · snapdragon +241 moreStack-based buffer overflow in ModemMemory corruption in modem due to stack based buffer overflow while parsing OTASP Key Generation Request Message.EPSS0.11%MediumCVE-2022-33289qualcomm, inc. · snapdragon +226 moreImproper validation of array index in ModemMemory corruption occurs in Modem due to improper validation of array index when malformed APDU is sent from card.EPSS0.19%HighCVE-2022-33302qualcomm, inc. · snapdragon +225 moreImproper validation of array index in User Identity ModuleMemory corruption due to improper validation of array index in User Identity Module when APN TLV length is greater than command length.EPSS0.12%HighCVE-2022-33233qualcomm, inc. · snapdragon +201 moreConfiguration weakness in modemMemory corruption due to configuration weakness in modem wile sending command to write protected files.EPSS0.12%HighCVE-2022-33213qualcomm, inc. · snapdragon +209 moreMemory Corruption in MODEMMemory corruption in modem due to buffer overflow while processing a PPP packetEPSS0.41%HighCVE-2024-23353qualcomm, inc. · snapdragon +247 moreBuffer Over-read in Multi Mode Call ProcessorTransient DOS while decoding attach reject message received by UE, when IEI is set to ESM_IEI.EPSS0.35%CriticalCVE-2023-43551qualcomm, inc. · snapdragon +234 moreImproper Authentication in Multi-Mode Call ProcessorCryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command.EPSS0.26%CriticalCVE-2023-22385qualcomm, inc. · snapdragon +239 moreBuffer Over-read in Data ModemMemory Corruption in Data Modem while making a MO call or MT VOLTE call.EPSS0.42%