Qualcomm MDM9625 Firmware vulnerabilities

141 CVEs affecting Qualcomm MDM9625 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-33066, published 2024-03-04.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2015-9201, published 2018-04-18. Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days. In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear IPQ4019, MDM9206, MDM9607, MDM9625, MDM9635M, MDM9640, MDM9645,…
CVE-2015-9150, published 2018-04-18. Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days. In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9625, MDM9635M, SD 400, and SD 800, while computing the length of memory allocated for a Diag event, if…
CVE-2015-9215, published 2018-04-18. Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days. In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9615, MDM9625, MDM9635M, and SD 810, improper input validation can cause a null pointer dereference in…
CVE-2015-9223, published 2018-04-18. Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days. In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9615, MDM9625, MDM9635M, SD 400, SD 600, and SD 800, a buffer overflow can occur when processing an audio…
CVE-2018-11945, published 2019-02-25. Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days. Improper input validation in wireless service messaging module for data received from broadcast messages can lead to heap overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer…
CVE-2016-10491, published 2018-04-18. Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days. In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD…
CVE-2015-9148, published 2018-04-18. Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days. In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, SD 400, SD 425, SD 430, SD…
CVE-2015-9118, published 2018-04-18. Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days. In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9615, MDM9625, MDM9635M, SD 400, SD 410/12, SD 615/16/SD 415, SD 800, SD 808, and SD 810, in ADSP's QDI…
CVE-2016-10490, published 2018-04-18. Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days. In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650,…
CVE-2016-10485, published 2018-04-18. Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days. In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear IPQ4019, MDM9206, MDM9607, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655,…

Latest

CVE-2023-33066, published 2024-03-04. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption in Audio while processing RT proxy port register driver.
CVE-2023-33033, published 2024-01-02. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption in Audio during playback with speaker protection.
CVE-2022-25719, published 2022-10-19. Critical severity, CVSS 9.1. EPSS: 0.6% chance of exploitation in the next 30 days. Information disclosure in WLAN due to improper length check while processing authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity,…
CVE-2021-30344, published 2022-06-14. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. Improper authorization of a replayed LTE security mode command can lead to a denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon…
CVE-2021-30284, published 2021-11-12. Critical severity, CVSS 9.1. EPSS: 0.6% chance of exploitation in the next 30 days. Possible information exposure and denial of service due to NAS not dropping messages when integrity check fails in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…
CVE-2021-1924, published 2021-11-12. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Information disclosure through timing and power side-channels during mod exponentiation for RSA-CRT in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics…
CVE-2021-30261, published 2021-09-17. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Possible integer and heap overflow due to lack of input command size validation while handling beacon template update command from HLOS in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon…
CVE-2021-1909, published 2021-09-09. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Buffer overflow occurs in trusted applications due to lack of length check of parameters in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity,…
CVE-2021-1920, published 2021-09-08. Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days. Integer underflow can occur due to improper handling of incoming RTCP packets in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…
CVE-2021-1919, published 2021-09-08. Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days. Integer underflow can occur when the RTCP length is lesser than than the actual blocks present in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon…