MF
Product
Mdm9628 Firmware
On CISA KEVExploited in the wild
246
CVEs
2
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 42High 182Medium 22Low 0
Watch
Add Mdm9628 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-24088 | 8.2 | Jun 1 | Missing Authentication for Critical Function in Boot Affected: All versions, or not specified |
| CVE-2024-33064 | 8.2 | Oct 7 | Buffer Over-read in WLAN Host Communication Affected: 0 |
| CVE-2022-33268 | 8.1 | Dec 13 | Information disclosure due to buffer over-read in Bluetooth HOST while pairing and connecting A2DP Affected: All versions, or not specified |
| CVE-2026-57554 | 7.8 | Oct 6 | Use After Free in DSP Service Affected: All versions, or not specified |
| CVE-2026-24082 | 7.8 | May 4 | Use After Free in Automotive GPU Affected: All versions, or not specified |
| CVE-2025-47404 | 7.8 | May 4 | Buffer Copy Without Checking Size of Input in Automotive Audio Affected: All versions, or not specified |
| CVE-2025-59600 | 7.8 | Mar 2 | Buffer Over-read in Graphics Affected: All versions, or not specified |
| CVE-2025-47386 | 7.8 | Mar 2 | Use After Free in Automotive Audio Affected: All versions, or not specified |
| CVE-2025-47379 | 7.8 | Mar 2 | Use After Free in Automotive Audio Affected: All versions, or not specified |
| CVE-2025-47376 | 7.8 | Mar 2 | Use After Free in Automotive Audio Affected: All versions, or not specified |
| CVE-2025-47320 | 7.8 | Dec 18 | Out-of-bounds Write in Audio Affected: All versions, or not specified |
| CVE-2025-27053 | 7.8 | Oct 9 | Incorrect Calculation of Buffer Size in HLOS Affected: All versions, or not specified |
| CVE-2025-27061 | 7.8 | Jul 8 | Out-of-bounds Write in Video Affected: All versions, or not specified |
| CVE-2025-27052 | 7.8 | Jul 8 | Buffer Copy Without Checking Size of Input in Core Services Affected: All versions, or not specified |
| CVE-2025-21467 | 7.8 | May 6 | Out-of-bounds Write in Computer Vision Affected: All versions, or not specified |
| CVE-2024-45581 | 7.8 | May 6 | Out-of-bounds Write in Audio Affected: All versions, or not specified |
| CVE-2025-21424 | 7.8 | Mar 3 | Use After Free in NPU Affected: All versions, or not specified |
| CVE-2024-53014 | 7.8 | Mar 3 | Improper Validation of Array Index in Audio Affected: All versions, or not specified |
| CVE-2024-33056 | 7.8 | Dec 2 | Buffer Over-read in MProc Affected: 0 |
| CVE-2024-38423 | 7.8 | Nov 4 | Buffer Copy Without Checking Size of Input in Graphics Linux Affected: 0 |
| CVE-2024-38422 | 7.8 | Nov 4 | Integer Overflow to Buffer Overflow in Audio Affected: 0 |
| CVE-2024-38419 | 7.8 | Nov 4 | Use After Free in Automotive GPU Affected: 0 |
| CVE-2024-38415 | 7.8 | Nov 4 | Use After Free in Computer Vision Affected: 0 |
| CVE-2024-38402 | 7.8 | Sep 2 | Use After Free in DSP Services Affected: 0 |
| CVE-2024-33060 | 7.8 | Sep 2 | Use After Free in DSP Service Affected: 0 |
| CVE-2024-33045 | 7.8 | Sep 2 | Return of Stack Variable Address in Buses Affected: 0 |
| CVE-2024-33028 | 7.8 | Aug 5 | Use After Free in Automotive Telematics Affected: 0 |
| CVE-2024-33023 | 7.8 | Aug 5 | Use After Free in Graphics Linux Affected: 0 |
| CVE-2024-33022 | 7.8 | Aug 5 | Integer Overflow or Wraparound in Automotive GPU Affected: 0 |
| CVE-2024-33021 | 7.8 | Aug 5 | Use of Uninitialized Variable in Automotive GPU Affected: 0 |
| CVE-2024-23373 | 7.8 | Jul 1 | Use After Free in Graphics Affected: 0 |
| CVE-2024-23368 | 7.8 | Jul 1 | Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Qualcomm IPC Affected: 0 |
| CVE-2024-21475 | 7.8 | May 6 | Use of Out-of-range Pointer Offset in Video Affected: All versions, or not specified |
| CVE-2024-21471 | 7.8 | May 6 | Use After Free in Graphics Linux Affected: 0 |
| CVE-2024-21468 | 7.8 | Apr 1 | Use After Free in Kernel Affected: 0 |
| CVE-2023-43550 | 7.8 | Mar 4 | Integer Overflow or Wraparound in Core Services Affected: 0 |
| CVE-2023-43547 | 7.8 | Mar 4 | Use After Free in Automotive Multimedia Affected: 0 |
| CVE-2023-43546 | 7.8 | Mar 4 | Use After Free in Automotive Multimedia Affected: 0 |
| CVE-2023-33066 | 7.8 | Mar 4 | Use of Out-of-range Pointer Offset in Audio Affected: 0 |
| CVE-2023-43513 | 7.8 | Feb 6 | Memory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may point to address in the middle of… Affected: All versions, or not specified |
| CVE-2023-33069 | 7.8 | Feb 6 | Memory corruption in Audio while processing the calibration data returned from ACDB loader Affected: All versions, or not specified |
| CVE-2023-33068 | 7.8 | Feb 6 | Memory corruption in Audio while processing IIR config data from AFE calibration block Affected: All versions, or not specified |
| CVE-2023-33067 | 7.8 | Feb 6 | Memory corruption in Audio while calling START command on host voice PCM multiple times for the same RX or TX tap points Affected: All versions, or not specified |
| CVE-2023-33120 | 7.8 | Jan 2 | Memory corruption in Audio when memory map command is executed consecutively in ADSP Affected: All versions, or not specified |
| CVE-2023-33033 | 7.8 | Jan 2 | Memory corruption in Audio during playback with speaker protection Affected: All versions, or not specified |
| CVE-2023-33030 | 7.8 | Jan 2 | Memory corruption in HLOS while running playready use-case Affected: All versions, or not specified |
| CVE-2023-33018 | 7.8 | Dec 5 | Memory corruption while using the UIM diag command to get the operators name Affected: All versions, or not specified |
| CVE-2023-33017 | 7.8 | Dec 5 | Memory corruption in Boot while running a ListVars test in UEFI Menu during boot Affected: All versions, or not specified |
| CVE-2023-28551 | 7.8 | Dec 5 | Memory corruption in UTILS when modem processes memory specific Diag commands having arbitrary address values as input arguments Affected: All versions, or not specified |
| CVE-2023-28550 | 7.8 | Dec 5 | Memory corruption in MPP performance while accessing DSM watermark using external memory address Affected: All versions, or not specified |