MF
Product
Mdm9628 Firmware
On CISA KEVExploited in the wild
246
CVEs
2
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 42High 182Medium 22Low 0
Watch
Add Mdm9628 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-1905 In wildKEV | 7.8 | May 7 | Qualcomm Multiple Chipsets Use-After-Free Vulnerability Affected: All versions, or not specified |
| CVE-2023-28572 | 8.8 | Nov 7 | Buffer Over-read in WLAN HOST Affected: All versions, or not specified |
| CVE-2022-33213 | 8.8 | Mar 10 | Memory corruption in modem due to buffer overflow while processing a PPP packet Affected: All versions, or not specified |
| CVE-2022-33280 | 8.8 | Feb 12 | Memory corruption due to access of uninitialized pointer in Bluetooth HOST while processing the AVRCP packet Affected: All versions, or not specified |
| CVE-2020-11177 | 8.8 | Feb 22 | User can overwrite Security Code NV item without knowing current SPC due to improper validation of SPC code setting and device lock in Snapdragon Auto, Snapdragon Compute,… Affected: All versions, or not specified |
| CVE-2020-11303 | 8.6 | Oct 20 | Accepting AMSDU frames with mismatched destination and source address can lead to information disclosure in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2021-1949 | 8.4 | Oct 20 | Possible integer overflow due to improper check of batch count value while sanitizer is enabled in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2026-24088 | 8.2 | Jun 1 | Missing Authentication for Critical Function in Boot Affected: All versions, or not specified |
| CVE-2024-33064 | 8.2 | Oct 7 | Buffer Over-read in WLAN Host Communication Affected: 0 |
| CVE-2022-33268 | 8.1 | Dec 13 | Information disclosure due to buffer over-read in Bluetooth HOST while pairing and connecting A2DP Affected: All versions, or not specified |
| CVE-2026-57554 | 7.8 | Oct 6 | Use After Free in DSP Service Affected: All versions, or not specified |
| CVE-2026-24082 | 7.8 | May 4 | Use After Free in Automotive GPU Affected: All versions, or not specified |
| CVE-2025-47404 | 7.8 | May 4 | Buffer Copy Without Checking Size of Input in Automotive Audio Affected: All versions, or not specified |
| CVE-2025-59600 | 7.8 | Mar 2 | Buffer Over-read in Graphics Affected: All versions, or not specified |
| CVE-2025-47386 | 7.8 | Mar 2 | Use After Free in Automotive Audio Affected: All versions, or not specified |
| CVE-2025-47379 | 7.8 | Mar 2 | Use After Free in Automotive Audio Affected: All versions, or not specified |
| CVE-2025-47376 | 7.8 | Mar 2 | Use After Free in Automotive Audio Affected: All versions, or not specified |
| CVE-2025-47320 | 7.8 | Dec 18 | Out-of-bounds Write in Audio Affected: All versions, or not specified |
| CVE-2025-27053 | 7.8 | Oct 9 | Incorrect Calculation of Buffer Size in HLOS Affected: All versions, or not specified |
| CVE-2025-27061 | 7.8 | Jul 8 | Out-of-bounds Write in Video Affected: All versions, or not specified |
| CVE-2025-27052 | 7.8 | Jul 8 | Buffer Copy Without Checking Size of Input in Core Services Affected: All versions, or not specified |
| CVE-2025-21467 | 7.8 | May 6 | Out-of-bounds Write in Computer Vision Affected: All versions, or not specified |
| CVE-2024-45581 | 7.8 | May 6 | Out-of-bounds Write in Audio Affected: All versions, or not specified |
| CVE-2025-21424 | 7.8 | Mar 3 | Use After Free in NPU Affected: All versions, or not specified |
| CVE-2024-53014 | 7.8 | Mar 3 | Improper Validation of Array Index in Audio Affected: All versions, or not specified |
| CVE-2024-33056 | 7.8 | Dec 2 | Buffer Over-read in MProc Affected: 0 |
| CVE-2024-38423 | 7.8 | Nov 4 | Buffer Copy Without Checking Size of Input in Graphics Linux Affected: 0 |
| CVE-2024-38422 | 7.8 | Nov 4 | Integer Overflow to Buffer Overflow in Audio Affected: 0 |
| CVE-2024-38419 | 7.8 | Nov 4 | Use After Free in Automotive GPU Affected: 0 |
| CVE-2024-38415 | 7.8 | Nov 4 | Use After Free in Computer Vision Affected: 0 |
| CVE-2024-38402 | 7.8 | Sep 2 | Use After Free in DSP Services Affected: 0 |
| CVE-2024-33060 | 7.8 | Sep 2 | Use After Free in DSP Service Affected: 0 |
| CVE-2024-33045 | 7.8 | Sep 2 | Return of Stack Variable Address in Buses Affected: 0 |
| CVE-2024-33028 | 7.8 | Aug 5 | Use After Free in Automotive Telematics Affected: 0 |
| CVE-2024-33023 | 7.8 | Aug 5 | Use After Free in Graphics Linux Affected: 0 |
| CVE-2024-33022 | 7.8 | Aug 5 | Integer Overflow or Wraparound in Automotive GPU Affected: 0 |
| CVE-2024-33021 | 7.8 | Aug 5 | Use of Uninitialized Variable in Automotive GPU Affected: 0 |
| CVE-2024-23373 | 7.8 | Jul 1 | Use After Free in Graphics Affected: 0 |
| CVE-2024-23368 | 7.8 | Jul 1 | Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Qualcomm IPC Affected: 0 |
| CVE-2024-21475 | 7.8 | May 6 | Use of Out-of-range Pointer Offset in Video Affected: All versions, or not specified |
| CVE-2024-21471 | 7.8 | May 6 | Use After Free in Graphics Linux Affected: 0 |
| CVE-2024-21468 | 7.8 | Apr 1 | Use After Free in Kernel Affected: 0 |
| CVE-2023-43550 | 7.8 | Mar 4 | Integer Overflow or Wraparound in Core Services Affected: 0 |
| CVE-2023-43547 | 7.8 | Mar 4 | Use After Free in Automotive Multimedia Affected: 0 |
| CVE-2023-43546 | 7.8 | Mar 4 | Use After Free in Automotive Multimedia Affected: 0 |
| CVE-2023-33066 | 7.8 | Mar 4 | Use of Out-of-range Pointer Offset in Audio Affected: 0 |
| CVE-2023-43513 | 7.8 | Feb 6 | Use of Out-of-range Pointer Offset in PCIe Affected: All versions, or not specified |
| CVE-2023-33069 | 7.8 | Feb 6 | Buffer Copy Without Checking Size of Input in Audio Affected: All versions, or not specified |
| CVE-2023-33068 | 7.8 | Feb 6 | Buffer Copy Without Checking Size of Input in Audio Affected: All versions, or not specified |
| CVE-2023-33067 | 7.8 | Feb 6 | Use of Out-of-range Pointer Offset in Audio Affected: 0 |