Msm8952 Firmware (Qualcomm) - vulnerabilities (CVEs)
23 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-09-22. Vendor: Qualcomm.
CVEs of Msm8952 Firmware
- CVE-2026-25262 - CVSS 6.9 (medium), 2026-09-22: Memory corruption while processing a crafted ELF file in the Primary Bootloader.
- CVE-2022-40515 - CVSS 9.8 (critical), 2023-03-10: Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms.
- CVE-2022-25705 - CVSS 7.8 (high), 2023-03-10: Memory corruption in modem due to integer overflow to buffer overflow while handling APDU response
- CVE-2022-25694 - CVSS 8.4 (high), 2023-03-10: Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM
- CVE-2022-22075 - CVSS 6.2 (medium), 2023-03-10: Information Disclosure in Graphics during GPU context switch.
- CVE-2022-33213 - CVSS 8.8 (high), 2023-03-10: Memory corruption in modem due to buffer overflow while processing a PPP packet
- CVE-2022-33233 - CVSS 7.8 (high), 2023-02-12: Memory corruption due to configuration weakness in modem wile sending command to write protected files.
- CVE-2022-22088 - CVSS 9.8 (critical), 2023-01-09: Memory corruption in Bluetooth HOST due to buffer overflow while parsing the command response received from remote
- CVE-2022-25682 - CVSS 8.4 (high), 2022-12-13: Memory corruption in MODEM UIM due to usage of out of range pointer offset while decoding command from card in Snapdragon Auto, Snapdragon Compute, Snapdragon…
- CVE-2022-25695 - CVSS 8.4 (high), 2022-12-13: Memory corruption in MODEM due to Improper Validation of Array Index while processing GSTK Proactive commands in Snapdragon Auto, Snapdragon Compute,…
- CVE-2022-25743 - CVSS 8.4 (high), 2022-11-15: Memory corruption in graphics due to use-after-free while importing graphics buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
- CVE-2022-25724 - CVSS 8.4 (high), 2022-11-15: Memory corruption in graphics due to buffer overflow while validating the user address in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
- CVE-2022-25720 - CVSS 9.8 (critical), 2022-10-19: Memory corruption in WLAN due to out of bound array access during connect/roaming in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
- CVE-2022-25664 - CVSS 6.2 (medium), 2022-10-19: Information disclosure due to exposure of information while GPU reads the data in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
- CVE-2022-25719 - CVSS 9.1 (critical), 2022-10-19: Information disclosure in WLAN due to improper length check while processing authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon…
- CVE-2022-25718 - CVSS 9.8 (critical), 2022-10-19: Cryptographic issue in WLAN due to improper check on return value while authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon…
- CVE-2022-25687 - CVSS 9.8 (critical), 2022-10-19: memory corruption in video due to buffer overflow while parsing asf clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…
- CVE-2021-1924 - CVSS 9 (critical), 2021-11-12: Information disclosure through timing and power side-channels during mod exponentiation for RSA-CRT in Snapdragon Auto, Snapdragon Compute, Snapdragon…
- CVE-2021-1909 - CVSS 7.8 (high), 2021-09-09: Buffer overflow occurs in trusted applications due to lack of length check of parameters in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
- CVE-2020-11269 - CVSS 8.8 (high), 2021-02-22: Possible memory corruption while processing EAPOL frames due to lack of validation of key length before using it in Snapdragon Auto, Snapdragon Compute,…
- CVE-2020-11170 - CVSS 9.8 (critical), 2021-02-22: Out of bound memory access while playing music playbacks with crafted vorbis content due to improper checks in header extraction in Snapdragon Auto,…
- CVE-2020-11207 - CVSS 7.8 (high), 2020-11-12: Buffer overflow in LibFastCV library due to improper size checks with respect to buffer length' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer…
- CVE-2016-10442 - CVSS 9.8 (critical), 2018-04-18: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9640, SDM630, MSM8976, MSM8937, SDM845, MSM8976, and MSM8952,…
