MF
Product
Msm8108 Firmware
On CISA KEVExploited in the wild
116
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 30High 72Medium 14Low 0
Watch
Add Msm8108 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-11234 | 7.8 | Apr 7 | When sending a socket event message to a user application, invalid information will be passed if socket is freed by other thread resulting in a Use After Free condition in… Affected: All versions, or not specified |
| CVE-2020-11204 | 7.8 | Feb 22 | Possible memory corruption and information leakage in sub-system due to lack of check for validity and boundary compliance for parameters that are read from shared MSG RAM in… Affected: All versions, or not specified |
| CVE-2020-11195 | 7.8 | Feb 22 | Out of bound write and read in TA while processing command from NS side due to improper length check on command and response buffers in Snapdragon Auto, Snapdragon Compute,… Affected: All versions, or not specified |
| CVE-2024-23358 | 7.5 | Sep 2 | Buffer Over-read in Multi Mode Call Processor Affected: 0 |
| CVE-2024-23353 | 7.5 | Aug 5 | Buffer Over-read in Multi Mode Call Processor Affected: 0 |
| CVE-2023-43551 | 7.5 | Jun 3 | Improper Authentication in Multi-Mode Call Processor Affected: All versions, or not specified |
| CVE-2023-28588 | 7.5 | Dec 5 | Integer Overflow or Wraparound in Bluetooth Host Affected: All versions, or not specified |
| CVE-2023-24849 | 7.5 | Oct 3 | Buffer Over-read in Data Modem Affected: All versions, or not specified |
| CVE-2023-24848 | 7.5 | Oct 3 | Buffer Over-read in Data Modem Affected: All versions, or not specified |
| CVE-2023-33020 | 7.5 | Sep 5 | Improper Authorization in WLAN Host Affected: All versions, or not specified |
| CVE-2023-33019 | 7.5 | Sep 5 | Improper Authorization in WLAN Host Affected: All versions, or not specified |
| CVE-2023-21625 | 7.5 | Aug 8 | Buffer Over-read in Network Services Affected: All versions, or not specified |
| CVE-2022-40521 | 7.5 | Jun 6 | Improper authorization in Modem Affected: All versions, or not specified |
| CVE-2022-40503 | 7.5 | Apr 4 | Buffer over-read in Bluetooth Host. Affected: All versions, or not specified |
| CVE-2022-25685 | 7.5 | Dec 13 | Denial of service in Modem module due to improper authorization while error handling in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT,… Affected: All versions, or not specified |
| CVE-2022-25702 | 7.5 | Dec 13 | Denial of service in modem due to reachable assertion while processing reconfiguration message in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1914 | 7.5 | Sep 8 | Loop with unreachable exit condition may occur due to improper handling of unsupported input in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2020-11255 | 7.5 | Apr 7 | Denial of service while processing RTCP packets containing multiple SDES reports due to memory for last SDES packet is freed and rest of the memory is leaked in Snapdragon Auto,… Affected: All versions, or not specified |
| CVE-2020-11226 | 7.5 | Mar 17 | Out of bound memory read in Data modem while unpacking data due to lack of offset length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2023-21626 | 7.1 | Aug 8 | Improper Authentication in HLOS. Affected: All versions, or not specified |
| CVE-2020-11304 | 7.1 | Jun 9 | Possible out of bound read in DRM due to improper buffer length check Affected: All versions, or not specified |
| CVE-2020-11132 | 7.1 | Nov 12 | u'Buffer over read in boot due to size check ignored before copying GUID attribute from request to response' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT,… Affected: All versions, or not specified |