MF
Product
Mdm9628 Firmware
by Qualcomm · last CVE Oct 6, 2026
On CISA KEVExploited in the wild
246
CVEs
2
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 42High 182Medium 22Low 0
Watch

Add Mdm9628 Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-1894
7.8
0%
Jan 3
Improper access control in TrustZone due to improper error handling while handling the signing key in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
Affected: All versions, or not specified
CVE-2021-30255
7.8
0%
Nov 12
Possible buffer overflow due to improper input validation in PDM DIAG command in FTM in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…
Affected: All versions, or not specified
CVE-2021-30254
7.8
0%
Nov 12
Possible buffer overflow due to improper input validation in factory calibration and test DIAG command in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
Affected: All versions, or not specified
CVE-2021-1973
7.8
0%
Nov 12
A FTM Diag command can allow an arbitrary write into modem OS space in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial…
Affected: All versions, or not specified
CVE-2021-30315
7.8
0%
Oct 20
Improper handling of sensor HAL structure in absence of sensor can lead to use after free in Snapdragon Auto
Affected: All versions, or not specified
CVE-2021-1959
7.8
0%
Oct 20
Possible memory corruption due to lack of bound check of input index in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon…
Affected: All versions, or not specified
CVE-2021-30261
7.8
0%
Sep 17
Possible integer and heap overflow due to lack of input command size validation while handling beacon template update command from HLOS in Snapdragon Auto, Snapdragon Consumer…
Affected: All versions, or not specified
CVE-2021-30260
7.8
0%
Sep 17
Possible Integer overflow to buffer overflow issue can occur due to improper validation of input parameters when extscan hostlist configuration command is received in Snapdragon…
Affected: All versions, or not specified
CVE-2020-11292
7.8
1%
Jun 9
Possible buffer overflow in voice service due to lack of input validation of parameters in QMI Voice API in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
Affected: All versions, or not specified
CVE-2020-11267
7.8
0%
Jun 9
Stack out-of-bounds write occurs while setting up a cipher device if the provided IV length exceeds the max limit value in Snapdragon Auto, Snapdragon Compute, Snapdragon…
Affected: All versions, or not specified
CVE-2020-11289
7.8
0%
May 7
Out of bound write can occur in TZ command handler due to lack of validation of command ID in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…
Affected: All versions, or not specified
CVE-2020-11234
7.8
0%
Apr 7
When sending a socket event message to a user application, invalid information will be passed if socket is freed by other thread resulting in a Use After Free condition in…
Affected: All versions, or not specified
CVE-2020-11309
7.8
0%
Mar 17
Use after free in GPU driver while mapping the user memory to GPU memory due to improper check of referenced memory in Snapdragon Auto, Snapdragon Compute, Snapdragon…
Affected: All versions, or not specified
CVE-2020-11204
7.8
0%
Feb 22
Possible memory corruption and information leakage in sub-system due to lack of check for validity and boundary compliance for parameters that are read from shared MSG RAM in…
Affected: All versions, or not specified
CVE-2020-11195
7.8
0%
Feb 22
Out of bound write and read in TA while processing command from NS side due to improper length check on command and response buffers in Snapdragon Auto, Snapdragon Compute,…
Affected: All versions, or not specified
CVE-2020-11131
7.8
0%
Nov 12
u'Possible buffer overflow in WMA message processing due to integer overflow occurs when processing command received from user space' in Snapdragon Auto, Snapdragon Consumer IOT,…
Affected: All versions, or not specified
CVE-2025-21430
7.5
0%
Apr 7
Buffer Over-read in WLAN Host
Affected: All versions, or not specified
CVE-2025-21429
7.5
0%
Apr 7
Buffer Over-read in WLAN Host
Affected: All versions, or not specified
CVE-2025-21428
7.5
0%
Apr 7
Buffer Over-read in WLAN Host
Affected: All versions, or not specified
CVE-2024-53027
7.5
0%
Mar 3
Buffer Copy Without Checking Size of Input in WLAN Host
Affected: All versions, or not specified
CVE-2024-49838
7.5
0%
Feb 3
Buffer Over-read in WLAN HOST
Affected: All versions, or not specified
CVE-2024-33071
7.5
0%
Oct 7
Buffer Over-read in WLAN Host Communication
Affected: 0
CVE-2024-33070
7.5
0%
Oct 7
Buffer Over-read in WLAN Host Communication
Affected: 0
CVE-2024-33051
7.5
0%
Sep 2
Buffer Over-read in WLAN Firmware
Affected: 0
CVE-2024-33050
7.5
0%
Sep 2
Buffer Over-read in WLAN Host Communication
Affected: 0
CVE-2024-33014
7.5
0%
Aug 5
Buffer Over-read in WLAN Host
Affected: 0
CVE-2024-33013
7.5
0%
Aug 5
Buffer Over-read in WLAN Host
Affected: 0
CVE-2024-33012
7.5
0%
Aug 5
Buffer Over-read in WLAN Host
Affected: 0
CVE-2024-33011
7.5
0%
Aug 5
Buffer Over-read in WLAN Host
Affected: 0
CVE-2024-33010
7.5
0%
Aug 5
Use After Free in WLAN Host
Affected: 0
CVE-2024-23353
7.5
0%
Aug 5
Buffer Over-read in Multi Mode Call Processor
Affected: 0
CVE-2023-43551
7.5
0%
Jun 3
Improper Authentication in Multi-Mode Call Processor
Affected: All versions, or not specified
CVE-2023-43511
7.5
0%
Jan 2
Loop with Unreachable Exit Condition (Infinite Loop) in WLAN Firmware
Affected: All versions, or not specified
CVE-2023-24849
7.5
0%
Oct 3
Buffer Over-read in Data Modem
Affected: All versions, or not specified
CVE-2023-24848
7.5
0%
Oct 3
Buffer Over-read in Data Modem
Affected: All versions, or not specified
CVE-2023-33020
7.5
0%
Sep 5
Improper Authorization in WLAN Host
Affected: All versions, or not specified
CVE-2023-33019
7.5
0%
Sep 5
Improper Authorization in WLAN Host
Affected: All versions, or not specified
CVE-2023-28555
7.5
0%
Aug 8
Buffer Over-read in Audio
Affected: All versions, or not specified
CVE-2022-40521
7.5
0%
Jun 6
Improper authorization in Modem
Affected: All versions, or not specified
CVE-2022-40503
7.5
0%
Apr 4
Buffer over-read in Bluetooth Host.
Affected: All versions, or not specified
CVE-2022-40512
7.5
0%
Feb 9
Buffer over-read in WLAN Firmware.
Affected: 0
CVE-2022-33299
7.5
0%
Jan 6
Null pointer dereference in Bluetooth HOST
Affected: All versions, or not specified
CVE-2022-33290
7.5
0%
Jan 6
Null pointer dereference in Bluetooth HOST
Affected: All versions, or not specified
CVE-2022-33238
7.5
0%
Dec 13
Transient DOS due to loop with unreachable exit condition in WLAN while processing an incoming FTM frames
Affected: All versions, or not specified
CVE-2022-25710
7.5
0%
Nov 15
Denial of service due to null pointer dereference when GATT is disconnected in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon…
Affected: All versions, or not specified
CVE-2022-33239
7.5
0%
Nov 15
Transient DOS due to loop with unreachable exit condition in WLAN firmware while parsing IPV6 extension header
Affected: All versions, or not specified
CVE-2022-33237
7.5
0%
Nov 15
Transient DOS due to buffer over-read in WLAN firmware while processing PPE threshold
Affected: All versions, or not specified
CVE-2022-25749
7.5
0%
Oct 19
Transient Denial-of-Service in WLAN due to buffer over-read while parsing MDNS frames
Affected: All versions, or not specified
CVE-2022-25736
7.5
1%
Oct 19
Denial of service in WLAN due to out-of-bound read happens while processing VHT action frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…
Affected: All versions, or not specified
CVE-2022-25690
7.5
0%
Sep 16
Information disclosure in WLAN due to improper validation of array index while parsing crafted ANQP action frames in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
Affected: All versions, or not specified
Page 4 of 5 · 246 total
1…345