MF
Product
Mdm9650 Firmware
by Qualcomm · last CVE Nov 4, 2025
On CISA KEVExploited in the wild
763
CVEs
5
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 261High 238Medium 1Low 0
Watch

Add Mdm9650 Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-33107
In wildKEV
7.8
1%
Dec 5
Integer Overflow or Wraparound in Graphics Linux
Affected: 0
CVE-2023-33063
In wildKEV
7.8
1%
Dec 5
Use After Free in DSP Services
Affected: 0
CVE-2020-11261
In wildKEV
7.8
2%
Jun 9
Qualcomm Multiple Chipsets Improper Input Validation Vulnerability
Affected: All versions, or not specified
CVE-2021-1905
In wildKEV
7.8
2%
May 7
Qualcomm Multiple Chipsets Use-After-Free Vulnerability
Affected: All versions, or not specified
CVE-2022-33213
8.8
0%
Mar 10
Memory corruption in modem due to buffer overflow while processing a PPP packet
Affected: All versions, or not specified
CVE-2022-33280
8.8
0%
Feb 12
Memory corruption due to access of uninitialized pointer in Bluetooth HOST while processing the AVRCP packet
Affected: All versions, or not specified
CVE-2020-11177
8.8
0%
Feb 22
User can overwrite Security Code NV item without knowing current SPC due to improper validation of SPC code setting and device lock in Snapdragon Auto, Snapdragon Compute,…
Affected: All versions, or not specified
CVE-2018-11279
8.8
1%
Jan 18
Lack of check of input size can make device memory get corrupted because of buffer overflow in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206,…
Affected: All versions, or not specified
CVE-2018-5876
8.8
1%
Jul 6
While parsing an mp4 file, a buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear
Affected: All versions, or not specified
CVE-2018-5875
8.8
1%
Jul 6
While parsing an mp4 file, an integer overflow leading to a buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear
Affected: All versions, or not specified
CVE-2018-5874
8.8
1%
Jul 6
While parsing an mp4 file, a stack-based buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear
Affected: All versions, or not specified
CVE-2020-11303
8.6
1%
Oct 20
Accepting AMSDU frames with mismatched destination and source address can lead to information disclosure in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer…
Affected: All versions, or not specified
CVE-2021-1949
8.4
0%
Oct 20
Possible integer overflow due to improper check of batch count value while sanitizer is enabled in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
Affected: All versions, or not specified
CVE-2018-5884
8.4
0%
Jul 6
Improper Access Control in Multimedia in Snapdragon Mobile and Snapdragon Wear, Non-standard applications without permission may acquire permission of Qualcomm-specific…
Affected: All versions, or not specified
CVE-2019-10494
8.1
0%
Dec 12
Race condition between the camera functions due to lack of resource lock which will lead to memory corruption and UAF issue in Snapdragon Auto, Snapdragon Consumer Electronics…
Affected: All versions, or not specified
CVE-2019-10529
8.1
2%
Nov 6
Possible use after free issue due to race condition while attempting to mark the entry pages as dirty using function set_page_dirty() in Snapdragon Auto, Snapdragon Compute,…
Affected: All versions, or not specified
CVE-2016-10417
8.1
1%
Apr 18
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear IPQ4019, MDM9206, MDM9607, MDM9625,…
Affected: All versions, or not specified
CVE-2025-27074
7.8
0%
Nov 4
Incorrect Calculation of Buffer Size in SCE-Mink
Affected: All versions, or not specified
CVE-2025-27053
7.8
0%
Oct 9
Incorrect Calculation of Buffer Size in HLOS
Affected: All versions, or not specified
CVE-2025-27062
7.8
0%
Aug 6
Improper Access Control in Automotive Multimedia
Affected: All versions, or not specified
CVE-2024-45562
7.8
0%
May 6
Use After Free in HLOS
Affected: All versions, or not specified
CVE-2024-43066
7.8
0%
Apr 7
Use After Free in HLOS
Affected: All versions, or not specified
CVE-2024-33056
7.8
0%
Dec 2
Buffer Over-read in MProc
Affected: 0
CVE-2018-5852
7.8
0%
Nov 26
Buffer Over-read in IPA
Affected: 0
CVE-2018-11952
7.8
0%
Nov 26
Improper Authentication in TrustZone
Affected: All versions, or not specified
CVE-2017-9711
7.8
0%
Nov 22
Permissions, Privileges, and Access Controls in Data
Affected: 0
CVE-2024-38423
7.8
0%
Nov 4
Buffer Copy Without Checking Size of Input in Graphics Linux
Affected: 0
CVE-2024-38422
7.8
0%
Nov 4
Integer Overflow to Buffer Overflow in Audio
Affected: 0
CVE-2024-33060
7.8
0%
Sep 2
Use After Free in DSP Service
Affected: 0
CVE-2024-23373
7.8
0%
Jul 1
Use After Free in Graphics
Affected: 0
CVE-2024-23368
7.8
0%
Jul 1
Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Qualcomm IPC
Affected: 0
CVE-2024-21461
7.8
0%
Jul 1
Double Free in HLOS
Affected: 0
CVE-2024-21471
7.8
0%
May 6
Use After Free in Graphics Linux
Affected: 0
CVE-2024-21468
7.8
0%
Apr 1
Use After Free in Kernel
Affected: 0
CVE-2023-33023
7.8
0%
Apr 1
Buffer Copy without Checking Size of Input (`Classic Buffer Overflow`) in SPS-Applications
Affected: 0
CVE-2023-28547
7.8
0%
Apr 1
Buffer Copy Without Checking Size of Input in SPS Applications
Affected: 0
CVE-2023-33066
7.8
0%
Mar 4
Use of Out-of-range Pointer Offset in Audio
Affected: 0
CVE-2023-33069
7.8
0%
Feb 6
Buffer Copy Without Checking Size of Input in Audio
Affected: All versions, or not specified
CVE-2023-33068
7.8
0%
Feb 6
Buffer Copy Without Checking Size of Input in Audio
Affected: All versions, or not specified
CVE-2023-33067
7.8
0%
Feb 6
Use of Out-of-range Pointer Offset in Audio
Affected: 0
CVE-2023-33120
7.8
0%
Jan 2
Use After Free in Audio
Affected: All versions, or not specified
CVE-2023-33113
7.8
0%
Jan 2
Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Kernel
Affected: All versions, or not specified
CVE-2023-33033
7.8
0%
Jan 2
Use of Out-of-range Pointer Offset in Audio
Affected: All versions, or not specified
CVE-2023-33030
7.8
0%
Jan 2
Buffer Copy without Checking Size of Input in HLOS
Affected: All versions, or not specified
CVE-2023-33017
7.8
0%
Dec 5
Buffer Copy Without Checking Size of Input in Boot
Affected: All versions, or not specified
CVE-2023-28546
7.8
0%
Dec 5
Buffer Copy Without Checking Size of Input in SPS Applications
Affected: All versions, or not specified
CVE-2023-33059
7.8
0%
Nov 7
Buffer Copy Without Checking Size of Input in Audio
Affected: All versions, or not specified
CVE-2023-33031
7.8
0%
Nov 7
Buffer Copy Without Checking Size of Input in Automotive Audio
Affected: All versions, or not specified
CVE-2023-33035
7.8
0%
Oct 3
Memory corruption while invoking callback function of AFE from ADSP
Affected: All versions, or not specified
CVE-2023-33021
7.8
0%
Sep 5
Memory corruption in Graphics while processing user packets for command submission
Affected: All versions, or not specified
Page 1 of 5 · 238 total
12…5
The 500 most important CVEs for this product (exploited first, then by severity)