Mdm9640 Firmware (Qualcomm) - vulnerabilities (CVEs)

495 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-03-02. Vendor: Qualcomm.

CVEs of Mdm9640 Firmware

CVE-2025-47383 - CVSS 7.2 (high), 2026-03-02: Weak configuration may lead to cryptographic issue when a VoWiFi call is triggered from UE.
CVE-2025-47320 - CVSS 7.8 (high), 2025-12-18: Memory corruption while processing MFC channel configuration during music playback.
CVE-2025-27074 - CVSS 8.8 (high), 2025-11-04: Memory corruption while processing a GP command response.
CVE-2025-27053 - CVSS 7.8 (high), 2025-10-09: Memory corruption during PlayReady APP usecase while processing TA commands.
CVE-2025-47318 - CVSS 7.5 (high), 2025-09-24: Transient DOS while parsing the EPTM test control message to get the test pattern.
CVE-2025-21482 - CVSS 7.1 (high), 2025-09-24: Cryptographic issue while performing RSA PKCS padding decoding.
CVE-2025-21430 - CVSS 7.5 (high), 2025-04-07: Transient DOS while connecting STA to AP and initiating ADD TS request from AP to establish TSpec session.
CVE-2025-21429 - CVSS 7.5 (high), 2025-04-07: Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request.
CVE-2025-21428 - CVSS 7.5 (high), 2025-04-07: Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request from the AP to establish a TSpec session.
CVE-2024-53027 - CVSS 7.5 (high), 2025-03-03: Transient DOS may occur while processing the country IE.
CVE-2024-38426 - CVSS 5.4 (medium), 2025-03-03: While processing the authentication message in UE, improper authentication may lead to information disclosure.
CVE-2018-5852 - CVSS 8.4 (high), 2024-11-26: An unsigned integer underflow vulnerability in IPA driver result into a buffer over-read while reading NAT entry using debugfs command 'cat…
CVE-2018-11952 - CVSS 8.4 (high), 2024-11-26: An image with a version lower than the fuse version may potentially be booted lead to improper authentication.
CVE-2018-11922 - CVSS 9.8 (critical), 2024-11-26: Wrong configuration in Touch Pal application can collect user behavior data without awareness by the user.
CVE-2017-9711 - CVSS 7.8 (high), 2024-11-22: Certain unprivileged processes are able to perform IOCTL calls.
CVE-2024-38422 - CVSS 7.8 (high), 2024-11-04: Memory corruption while processing voice packet with arbitrary data received from ADSP.
CVE-2024-33051 - CVSS 7.5 (high), 2024-09-02: Transient DOS while processing TIM IE from beacon frame as there is no check for IE length.
CVE-2024-23353 - CVSS 7.5 (high), 2024-08-05: Transient DOS while decoding attach reject message received by UE, when IEI is set to ESM_IEI.
CVE-2024-21461 - CVSS 8.4 (high), 2024-07-01: Memory corruption while performing finish HMAC operation when context is freed by keymaster.
CVE-2023-43551 - CVSS 9.1 (critical), 2024-06-03: Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode…
CVE-2024-21468 - CVSS 8.4 (high), 2024-04-01: Memory corruption when there is failed unmap operation in GPU.
CVE-2023-28547 - CVSS 8.4 (high), 2024-04-01: Memory corruption in SPS Application while requesting for public key in sorter TA.
CVE-2023-33023 - CVSS 8.4 (high), 2024-04-01: Memory corruption while processing finish_sign command to pass a rsp buffer.
CVE-2023-33066 - CVSS 8.4 (high), 2024-03-04: Memory corruption in Audio while processing RT proxy port register driver.
CVE-2023-43511 - CVSS 7.5 (high), 2024-01-02: Transient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains `IPPROTO_NONE` as the next header.
CVE-2023-33120 - CVSS 7.8 (high), 2024-01-02: Memory corruption in Audio when memory map command is executed consecutively in ADSP.
CVE-2023-33033 - CVSS 8.4 (high), 2024-01-02: Memory corruption in Audio during playback with speaker protection.
CVE-2023-33030 - CVSS 9.3 (critical), 2024-01-02: Memory corruption in HLOS while running playready use-case.
CVE-2023-33080 - CVSS 7.5 (high), 2023-12-05: Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management frame.
CVE-2023-33018 - CVSS 7.8 (high), 2023-12-05: Memory corruption while using the UIM diag command to get the operators name.
CVE-2023-28551 - CVSS 7.8 (high), 2023-12-05: Memory corruption in UTILS when modem processes memory specific Diag commands having arbitrary address values as input arguments.
CVE-2023-28586 - CVSS 6.5 (medium), 2023-12-05: Information disclosure when the trusted application metadata symbol addresses are accessed while loading an ELF in TEE.
CVE-2023-28550 - CVSS 7.8 (high), 2023-12-05: Memory corruption in MPP performance while accessing DSM watermark using external memory address.
CVE-2023-28546 - CVSS 7.8 (high), 2023-12-05: Memory Corruption in SPS Application while exporting public key in sorter TA.
CVE-2023-33059 - CVSS 7.8 (high), 2023-11-07: Memory corruption in Audio while processing the VOC packet data from ADSP.
CVE-2023-33031 - CVSS 7.8 (high), 2023-11-07: Memory corruption in Automotive Audio while copying data from ADSP shared buffer to the VOC packet data buffer.
CVE-2023-28563 - CVSS 6.1 (medium), 2023-11-07: Information disclosure in IOE Firmware while handling WMI command.
CVE-2023-22388 - CVSS 9.8 (critical), 2023-11-07: Memory Corruption in Multi-mode Call Processor while processing bit mask API.
CVE-2023-24849 - CVSS 8.2 (high), 2023-10-03: Information Disclosure in data Modem while parsing an FMTP line in an SDP message.
CVE-2023-24848 - CVSS 8.2 (high), 2023-10-03: Information Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line value.
CVE-2023-22385 - CVSS 9.8 (critical), 2023-10-03: Memory Corruption in Data Modem while making a MO call or MT VOLTE call.
CVE-2023-28565 - CVSS 7.8 (high), 2023-09-05: Memory corruption in WLAN HAL while handling command streams through WMI interfaces.
CVE-2023-28564 - CVSS 7.8 (high), 2023-09-05: Memory corruption in WLAN HAL while passing command parameters through WMI interfaces.
CVE-2023-28560 - CVSS 7.8 (high), 2023-09-05: Memory corruption in WLAN HAL while processing devIndex from untrusted WMI payload.
CVE-2022-40510 - CVSS 9.8 (critical), 2023-08-08: Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder.
CVE-2023-28541 - CVSS 7.8 (high), 2023-07-04: Memory Corruption in Data Modem while processing DMA buffer release event about CFR data.
CVE-2022-40521 - CVSS 7.5 (high), 2023-06-06: Transient DOS due to improper authorization in Modem
CVE-2023-21628 - CVSS 8.4 (high), 2023-06-06: Memory corruption in WLAN HAL while processing WMI-UTF command or FTM TLV1 command.
CVE-2022-33264 - CVSS 7.9 (high), 2023-06-06: Memory corruption in modem due to stack based buffer overflow while parsing OTASP Key Generation Request Message.
CVE-2022-22076 - CVSS 7.1 (high), 2023-06-06: information disclosure due to cryptographic issue in Core during RPMB read request.
CVE-2022-40532 - CVSS 8.4 (high), 2023-04-13: Memory corruption due to integer overflow or wraparound in WLAN while sending WMI cmd from host to target.
CVE-2022-33302 - CVSS 7.8 (high), 2023-04-13: Memory corruption due to improper validation of array index in User Identity Module when APN TLV length is greater than command length.
CVE-2022-33289 - CVSS 6.8 (medium), 2023-04-13: Memory corruption occurs in Modem due to improper validation of array index when malformed APDU is sent from card.
CVE-2022-40531 - CVSS 8.4 (high), 2023-03-10: Memory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID message.
CVE-2022-25655 - CVSS 8.4 (high), 2023-03-10: Memory corruption in WLAN HAL while arbitrary value is passed in WMI UTF command payload.
CVE-2022-33213 - CVSS 8.8 (high), 2023-03-10: Memory corruption in modem due to buffer overflow while processing a PPP packet
CVE-2022-25705 - CVSS 7.8 (high), 2023-03-10: Memory corruption in modem due to integer overflow to buffer overflow while handling APDU response
CVE-2022-25694 - CVSS 8.4 (high), 2023-03-10: Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM
CVE-2022-40512 - CVSS 7.5 (high), 2023-02-12: Transient DOS in WLAN Firmware due to buffer over-read while processing probe response or beacon.
CVE-2022-33233 - CVSS 7.8 (high), 2023-02-12: Memory corruption due to configuration weakness in modem wile sending command to write protected files.
CVE-2022-33271 - CVSS 8.2 (high), 2023-02-12: Information disclosure due to buffer over-read in WLAN while parsing NMF frame.
CVE-2022-40520 - CVSS 8.4 (high), 2023-01-09: Memory corruption due to stack-based buffer overflow in Core
CVE-2022-33290 - CVSS 7.5 (high), 2023-01-09: Transient DOS in Bluetooth HOST due to null pointer dereference when a mismatched argument is passed.
CVE-2022-33286 - CVSS 7.5 (high), 2023-01-09: Transient DOS due to buffer over-read in WLAN while processing 802.11 management frames.
CVE-2022-33285 - CVSS 7.5 (high), 2023-01-09: Transient DOS due to buffer over-read in WLAN while parsing WLAN CSA action frames.
CVE-2022-33299 - CVSS 7.5 (high), 2023-01-09: Transient DOS due to null pointer dereference in Bluetooth HOST while receiving an attribute protocol PDU with zero length data.
CVE-2022-22063 - CVSS 8.4 (high), 2022-12-15: Memory corruption in Core due to improper configuration in boot remapper.
CVE-2022-33238 - CVSS 7.5 (high), 2022-12-13: Transient DOS due to loop with unreachable exit condition in WLAN while processing an incoming FTM frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2022-33235 - CVSS 8.2 (high), 2022-12-13: Information disclosure due to buffer over-read in WLAN firmware while parsing security context info attributes. in Snapdragon Auto, Snapdragon Compute,…
CVE-2022-25682 - CVSS 8.4 (high), 2022-12-13: Memory corruption in MODEM UIM due to usage of out of range pointer offset while decoding command from card in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2022-25695 - CVSS 8.4 (high), 2022-12-13: Memory corruption in MODEM due to Improper Validation of Array Index while processing GSTK Proactive commands in Snapdragon Auto, Snapdragon Compute,…
CVE-2022-33239 - CVSS 7.5 (high), 2022-11-15: Transient DOS due to loop with unreachable exit condition in WLAN firmware while parsing IPV6 extension header. in Snapdragon Auto, Snapdragon Compute,…
CVE-2022-25710 - CVSS 7.5 (high), 2022-11-15: Denial of service due to null pointer dereference when GATT is disconnected in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon…
CVE-2022-25718 - CVSS 9.8 (critical), 2022-10-19: Cryptographic issue in WLAN due to improper check on return value while authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon…
CVE-2022-25749 - CVSS 7.5 (high), 2022-10-19: Transient Denial-of-Service in WLAN due to buffer over-read while parsing MDNS frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
CVE-2022-25748 - CVSS 9.8 (critical), 2022-10-19: Memory corruption in WLAN due to integer overflow to buffer overflow while parsing GTK frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2022-25720 - CVSS 9.8 (critical), 2022-10-19: Memory corruption in WLAN due to out of bound array access during connect/roaming in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
CVE-2022-22058 - CVSS 8.4 (high), 2022-09-26: Memory corruption due to use after free issue in kernel while processing ION handles in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
CVE-2022-25690 - CVSS 7.5 (high), 2022-09-16: Information disclosure in WLAN due to improper validation of array index while parsing crafted ANQP action frames in Snapdragon Auto, Snapdragon Compute,…
CVE-2022-25670 - CVSS 7.5 (high), 2022-09-16: Denial of service in WLAN HOST due to buffer over read while unpacking frames in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
CVE-2022-22105 - CVSS 9.8 (critical), 2022-09-16: Memory corruption in bluetooth due to integer overflow while processing HFP-UNIT profile in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile,…
CVE-2022-22074 - CVSS 8.4 (high), 2022-09-16: Memory Corruption during wma file playback due to integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…
CVE-2022-22080 - CVSS 8.4 (high), 2022-09-02: Improper validation of backend id in PCM routing process can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
CVE-2022-22062 - CVSS 9.1 (critical), 2022-09-02: An out-of-bounds read can occur while parsing a server certificate due to improper length check in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2021-35135 - CVSS 6.2 (medium), 2022-09-02: A null pointer dereference may potentially occur during RSA key import in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…
CVE-2022-25651 - CVSS 9.8 (critical), 2022-06-14: Memory corruption in bluetooth host due to integer overflow while processing BT HFP-UNIT profile in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon…
CVE-2022-22065 - CVSS 7.5 (high), 2022-06-14: Out of bound read in WLAN HOST due to improper length check can lead to DOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
CVE-2022-22064 - CVSS 7.5 (high), 2022-06-14: Possible buffer over read due to lack of size validation while unpacking frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
CVE-2021-35116 - CVSS 7.7 (high), 2022-06-14: APK can load a crafted model into the CDSP which can lead to a compromise of CDSP and other APK`s data executing there in Snapdragon Auto, Snapdragon Compute,…
CVE-2021-35098 - CVSS 6.7 (medium), 2022-06-14: Improper validation of session id in PCM routing process can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
CVE-2021-35083 - CVSS 9.1 (critical), 2022-06-14: Possible out of bound read due to improper validation of certificate chain in SSL or Internet key exchange in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2021-30344 - CVSS 7.5 (high), 2022-06-14: Improper authorization of a replayed LTE security mode command can lead to a denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2021-35072 - CVSS 7.8 (high), 2022-06-14: Possible buffer overflow due to improper validation of array index while processing external DIAG command in Snapdragon Auto, Snapdragon Consumer IOT,…
CVE-2021-30342 - CVSS 9.1 (critical), 2022-06-14: Improper integrity check can lead to race condition between tasks PDCP and RRC? after a valid RRC Command packet has been received in Snapdragon Auto,…
CVE-2021-30341 - CVSS 9.8 (critical), 2022-06-14: Improper buffer size validation of DSM packet received can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
CVE-2021-30333 - CVSS 7.8 (high), 2022-04-01: Improper validation of buffer size input to the EFS file can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
CVE-2021-30323 - CVSS 7.8 (high), 2022-02-11: Improper validation of maximum size of data write to EFS file can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT,…
CVE-2021-30300 - CVSS 7.5 (high), 2022-01-13: Possible denial of service due to incorrectly decoding hex data for the SIB2 OTA message and assigning a garbage value to choice when processing the SRS…
CVE-2021-30319 - CVSS 7.8 (high), 2022-01-13: Possible integer overflow due to improper validation of command length parameters while processing WMI command in Snapdragon Auto, Snapdragon Compute,…
CVE-2021-30348 - CVSS 6.5 (medium), 2022-01-03: Improper validation of LLM utility timers availability can lead to denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…