Qualcomm Mdm9645 vulnerabilities

• qualcomm mdm9207 firmware, mdm9645 firmware, mdm9655 firmware +6 more +8 more Write-what-where Condition in Primary Bootloader CVE-2026-25262 Public exploit 6.9 MediumSeptember 22, 2026
• qualcomm 315 5g iot modem firmware, 9205 lte modem firmware, 9206 lte modem firmware +285 more +287 more Cryptographic Issues in Core CVE-2025-21482 7.1 HighSeptember 24, 2025
• qualcomm 315 5g iot firmware, 315 5g iot modem firmware, 9206 lte firmware +343 more +345 more Buffer Over-read in WLAN Firmware CVE-2024-33051 7.5 HighSeptember 2, 2024
• qualcomm 315 5g iot modem firmware, 9206 lte modem firmware, apq8017 firmware +354 more +356 more Loop with Unreachable Exit Condition (Infinite Loop) in WLAN Firmware CVE-2023-43511 7.5 HighJanuary 2, 2024
• qualcomm 315 5g iot modem firmware, 8098 firmware, 8998 firmware +364 more +366 more Buffer over-read in WLAN Firmware CVE-2023-33080 7.5 HighDecember 5, 2023
• qualcomm 9205 lte firmware, apq8017 firmware, apq8064au firmware +292 more +294 more Improper Validation of Array Index in WLAN HAL CVE-2023-28565 7.8 HighSeptember 5, 2023
• qualcomm apq8017 firmware, apq8064au firmware, apq8076 firmware +281 more +283 more Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN HAL CVE-2023-21628 8.4 HighJune 6, 2023
• qualcomm 315 5g iot modem firmware, 8905 firmware, 8909 firmware +351 more +353 more Integer overflow or wraparound in WLAN CVE-2022-40532 8.4 HighApril 4, 2023
• qualcomm apq8009 firmware, apq8017 firmware, apq8064au firmware +293 more +295 more Buffer over-read in WLAN Firmware. CVE-2022-40512 7.5 HighFebruary 9, 2023
• qualcomm apq8009 firmware, apq8017 firmware, apq8064au firmware +279 more +281 more Buffer over-read in WLAN CVE-2022-33286 7.5 HighJanuary 6, 2023
• qualcomm apq8009 firmware, apq8017 firmware, apq8064au firmware +276 more +278 more Buffer over-read in WLAN CVE-2022-33285 7.5 HighJanuary 6, 2023
• qualcomm apq8096au firmware, mdm9640 firmware, mdm9645 firmware +6 more +8 more Memory corruption in Core CVE-2022-22063 Public exploit 8.4 HighDecember 14, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +282 more +284 more Transient DOS due to loop with unreachable exit condition in WLAN while processing an incoming... CVE-2022-33238 7.5 HighDecember 13, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +232 more +234 more Transient DOS due to loop with unreachable exit condition in WLAN firmware while parsing IPV6... CVE-2022-33239 7.5 HighNovember 15, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +274 more +276 more Transient Denial-of-Service in WLAN due to buffer over-read while parsing MDNS frames. in... CVE-2022-25749 7.5 HighOctober 19, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +271 more +273 more Memory corruption in WLAN due to integer overflow to buffer overflow while parsing GTK frames. in... CVE-2022-25748 9.8 CriticalOctober 19, 2022
• qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +140 more +142 more Cryptographic issue in WLAN due to improper check on return value while authentication handshake... CVE-2022-25718 9.1 CriticalOctober 19, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +197 more +199 more An out-of-bounds read can occur while parsing a server certificate due to improper length check... CVE-2022-22062 8.2 HighSeptember 2, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009w firmware, apq8017 firmware +145 more +147 more Improper authorization of a replayed LTE security mode command can lead to a denial of service in... CVE-2021-30344 7.5 HighJune 14, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009w firmware, apq8017 firmware +164 more +166 more Possible null pointer dereference in trap handler due to lack of thread ID validation before... CVE-2021-30271 7.3 HighJanuary 3, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +315 more +317 more Information disclosure through timing and power side-channels during mod exponentiation for RSA... CVE-2021-1924 9.0 CriticalNovember 12, 2021
• qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8053 firmware +89 more +91 more Accepting AMSDU frames with mismatched destination and source address can lead to information... CVE-2020-11303 8.6 HighOctober 20, 2021
• qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +180 more +182 more Possible integer and heap overflow due to lack of input command size validation while handling... CVE-2021-30261 8.4 HighSeptember 17, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +256 more +258 more Possible Integer overflow to buffer overflow issue can occur due to improper validation of input... CVE-2021-30260 8.4 HighSeptember 17, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +325 more +327 more Buffer overflow occurs in trusted applications due to lack of length check of parameters in... CVE-2021-1909 7.3 HighSeptember 9, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +169 more +171 more Integer underflow can occur due to improper handling of incoming RTCP packets in Snapdragon Auto,... CVE-2021-1920 9.8 CriticalSeptember 8, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +153 more +155 more Integer underflow can occur when the RTCP length is lesser than than the actual blocks present in... CVE-2021-1919 9.8 CriticalSeptember 8, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +180 more +182 more Possible buffer underflow due to lack of check for negative indices values when processing user... CVE-2021-1916 9.8 CriticalSeptember 8, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +265 more +267 more Improper authentication of un-encrypted plaintext Wi-Fi frames in an encrypted network can lead... CVE-2020-11301 Fix available EPSS 11.1% 9.1 CriticalSeptember 8, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +175 more +177 more Possible buffer overflow in voice service due to lack of input validation of parameters in QMI... CVE-2020-11292 7.8 HighJune 9, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +536 more +538 more Buffer overflow might occur while parsing unified command due to lack of check of input data... CVE-2020-11235 7.8 HighJune 9, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +501 more +503 more Buffer over-read can happen while processing WPA,RSN IE of beacon and response frames if IE... CVE-2020-11159 9.1 CriticalJune 9, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +398 more +400 more Buffer over-read while unpacking the RTCP packet we may read extra byte if wrong length is... CVE-2020-11285 8.2 HighMay 7, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +406 more +408 more Memory corruption while processing crafted SDES packets due to improper length check in sdes... CVE-2020-11279 7.5 HighMay 7, 2021
• qualcomm, inc. snapdragon auto, snapdragon mobile, qualcomm apq8009, apq8016 +84 more +86 more Potential UE reset while decoding a crafted Sib1 or SIB1 that schedules unsupported SIBs and can... CVE-2020-11268 7.5 HighMay 7, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +474 more +476 more Out of bound read occurs while processing crafted SDP due to lack of check of null string in... CVE-2020-11191 8.2 HighApril 7, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +399 more +401 more Out of bound write while parsing RTT/TTY packet parsing due to lack of check of buffer size... CVE-2020-11227 9.8 CriticalMarch 17, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +399 more +401 more Out of bound memory read in Data modem while unpacking data due to lack of offset length check in... CVE-2020-11226 7.5 HighMarch 17, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +399 more +401 more Usage of syscall by non-secure entity can allow extraction of secure QTEE diagnostic information... CVE-2020-11221 5.5 MediumMarch 17, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +399 more +401 more HLOS to access EL3 stack canary by just mapping imem region due to Improper access control and... CVE-2020-11199 5.5 MediumMarch 17, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +399 more +401 more Buffer over-read can happen while parsing received SDP values due to lack of NULL termination... CVE-2020-11190 9.1 CriticalMarch 17, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +399 more +401 more Buffer over-read can happen while parsing received SDP values due to lack of NULL termination... CVE-2020-11189 9.1 CriticalMarch 17, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +396 more +398 more Buffer over-read can happen while parsing received SDP values due to lack of NULL termination... CVE-2020-11188 9.1 CriticalMarch 17, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +406 more +408 more Potential out of bound read exception when UE receives unusually large number of padding octets... CVE-2020-11166 9.1 CriticalMarch 17, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +530 more +532 more Arithmetic overflow can happen while processing NOA IE due to improper error handling in... CVE-2020-11296 7.5 HighFebruary 22, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +512 more +514 more Possible buffer over read while processing P2P IE and NOA attribute of beacon and probe response... CVE-2020-11276 9.1 CriticalFebruary 22, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +535 more +537 more Possible memory corruption while processing EAPOL frames due to lack of validation of key length... CVE-2020-11269 8.8 HighFebruary 22, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8016 firmware +517 more +519 more Possible memory corruption and information leakage in sub-system due to lack of check for... CVE-2020-11204 7.8 HighFebruary 22, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +405 more +407 more User can overwrite Security Code NV item without knowing current SPC due to improper validation... CVE-2020-11177 8.8 HighFebruary 22, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +503 more +505 more Out of bound memory access while playing music playbacks with crafted vorbis content due to... CVE-2020-11170 9.8 CriticalFebruary 22, 2021
• Show olderLoading…