Qualcomm MSM8209 Firmware vulnerabilities

120 CVEs affecting Qualcomm MSM8209 Firmware, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-21484, published 2025-09-24.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-33107: Qualcomm Multiple Chipsets Integer Overflow Vulnerability, published 2023-12-05. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2023-12-05. EPSS: 0.7% chance of exploitation in the next 30 days. Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.
CVE-2022-40507, published 2023-06-06. High severity, CVSS 7.8. EPSS: 1.3% chance of exploitation in the next 30 days. Memory corruption due to double free in Core while mapping HLOS address to the list.
CVE-2020-11192, published 2021-03-17. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. Out of bound write while parsing SDP string due to missing check on null termination in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial…
CVE-2020-11190, published 2021-03-17. Critical severity, CVSS 9.1. EPSS: 1% chance of exploitation in the next 30 days. Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…
CVE-2020-11189, published 2021-03-17. Critical severity, CVSS 9.1. EPSS: 1% chance of exploitation in the next 30 days. Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…
CVE-2020-11188, published 2021-03-17. Critical severity, CVSS 9.1. EPSS: 1% chance of exploitation in the next 30 days. Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…
CVE-2020-11171, published 2021-03-17. Critical severity, CVSS 9.1. EPSS: 1% chance of exploitation in the next 30 days. Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…
CVE-2020-11251, published 2021-04-07. Critical severity, CVSS 9.1. EPSS: 0.9% chance of exploitation in the next 30 days. Out-of-bounds read vulnerability while accessing DTMF payload due to lack of check of buffer length before copying in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…
CVE-2020-11191, published 2021-04-07. Critical severity, CVSS 9.1. EPSS: 0.9% chance of exploitation in the next 30 days. Out of bound read occurs while processing crafted SDP due to lack of check of null string in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics…
CVE-2020-11166, published 2021-03-17. Critical severity, CVSS 9.1. EPSS: 0.9% chance of exploitation in the next 30 days. Potential out of bound read exception when UE receives unusually large number of padding octets in the beginning of ROHC header in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…

Latest

CVE-2025-21484, published 2025-09-24. High severity, CVSS 8.2. EPSS: 0.3% chance of exploitation in the next 30 days. Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet.
CVE-2024-45552, published 2025-04-07. High severity, CVSS 8.2. EPSS: 0.3% chance of exploitation in the next 30 days. Information disclosure may occur during a video call if a device resets due to a non-conforming RTCP packet that doesn`t adhere to RFC standards.
CVE-2024-43052, published 2024-12-02. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption while processing API calls to NPU with invalid input.
CVE-2024-33056, published 2024-12-02. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption when allocating and accessing an entry in an SMEM partition continuously.
CVE-2024-38423, published 2024-11-04. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption while processing GPU page table switch.
CVE-2024-38422, published 2024-11-04. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption while processing voice packet with arbitrary data received from ADSP.
CVE-2024-23385, published 2024-11-04. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. Transient DOS as modem reset occurs when an unexpected MAC RAR (with invalid PDU length) is seen at UE.
CVE-2024-33052, published 2024-09-02. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption when user provides data for FM HCI command control operations.
CVE-2024-33043, published 2024-09-02. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. Transient DOS while handling PS event when Program Service name length offset value is set to 255.
CVE-2024-33042, published 2024-09-02. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption when Alternative Frequency offset value is set to 255.