MF
Product
Msm8996au Firmware
by Qualcomm · last CVE Dec 18, 2025
On CISA KEVExploited in the wild
681
CVEs
4
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 187High 312Medium 1Low 0
Watch

Add Msm8996au Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-33107
In wildKEV
7.8
1%
Dec 5
Integer Overflow or Wraparound in Graphics Linux
Affected: 0
CVE-2020-11261
In wildKEV
7.8
2%
Jun 9
Qualcomm Multiple Chipsets Improper Input Validation Vulnerability
Affected: All versions, or not specified
CVE-2021-1905
In wildKEV
7.8
2%
May 7
Qualcomm Multiple Chipsets Use-After-Free Vulnerability
Affected: All versions, or not specified
CVE-2023-28572
8.8
0%
Nov 7
Buffer Over-read in WLAN HOST
Affected: All versions, or not specified
CVE-2022-33213
8.8
0%
Mar 10
Memory corruption in modem due to buffer overflow while processing a PPP packet
Affected: All versions, or not specified
CVE-2022-22088
8.8
1%
Jan 9
Memory corruption in Bluetooth HOST due to buffer overflow while parsing the command response received from remote
Affected: All versions, or not specified
CVE-2020-11177
8.8
0%
Feb 22
User can overwrite Security Code NV item without knowing current SPC due to improper validation of SPC code setting and device lock in Snapdragon Auto, Snapdragon Compute,…
Affected: All versions, or not specified
CVE-2018-11279
8.8
1%
Jan 18
Lack of check of input size can make device memory get corrupted because of buffer overflow in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206,…
Affected: All versions, or not specified
CVE-2018-11982
8.8
0%
Sep 20
In Snapdragon (Mobile, Wear) in version MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD…
Affected: All versions, or not specified
CVE-2018-5876
8.8
1%
Jul 6
While parsing an mp4 file, a buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear
Affected: All versions, or not specified
CVE-2018-5875
8.8
1%
Jul 6
While parsing an mp4 file, an integer overflow leading to a buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear
Affected: All versions, or not specified
CVE-2018-5874
8.8
1%
Jul 6
While parsing an mp4 file, a stack-based buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear
Affected: All versions, or not specified
CVE-2020-11303
8.6
1%
Oct 20
Accepting AMSDU frames with mismatched destination and source address can lead to information disclosure in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer…
Affected: All versions, or not specified
CVE-2021-1949
8.4
0%
Oct 20
Possible integer overflow due to improper check of batch count value while sanitizer is enabled in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
Affected: All versions, or not specified
CVE-2018-5891
8.4
0%
Jul 6
While processing modem SSR after IMS is registered, the IMS data daemon is restarted but the ipc_dataHandle is no longer available
Affected: All versions, or not specified
CVE-2025-21488
8.2
0%
Sep 24
Buffer Over-read in Data Network Stack & Connectivity
Affected: All versions, or not specified
CVE-2025-21487
8.2
0%
Sep 24
Buffer Over-read in Data Network Stack & Connectivity
Affected: All versions, or not specified
CVE-2025-21484
8.2
0%
Sep 24
Buffer Over-read in Data Network Stack & Connectivity
Affected: All versions, or not specified
CVE-2025-21427
8.2
0%
Jul 8
Buffer Over-read in Data HLOS - LNX
Affected: All versions, or not specified
CVE-2024-45552
8.2
0%
Apr 7
Buffer Over-read in Data Network Stack & Connectivity
Affected: All versions, or not specified
CVE-2023-22382
8.2
0%
Oct 3
Improper Input Validation in Automotive
Affected: All versions, or not specified
CVE-2019-10494
8.1
0%
Dec 12
Race condition between the camera functions due to lack of resource lock which will lead to memory corruption and UAF issue in Snapdragon Auto, Snapdragon Consumer Electronics…
Affected: All versions, or not specified
CVE-2019-10529
8.1
2%
Nov 6
Possible use after free issue due to race condition while attempting to mark the entry pages as dirty using function set_page_dirty() in Snapdragon Auto, Snapdragon Compute,…
Affected: All versions, or not specified
CVE-2025-47320
7.8
0%
Dec 18
Out-of-bounds Write in Audio
Affected: All versions, or not specified
CVE-2025-27074
7.8
0%
Nov 4
Incorrect Calculation of Buffer Size in SCE-Mink
Affected: All versions, or not specified
CVE-2025-27053
7.8
0%
Oct 9
Incorrect Calculation of Buffer Size in HLOS
Affected: All versions, or not specified
CVE-2025-27062
7.8
0%
Aug 6
Improper Access Control in Automotive Multimedia
Affected: All versions, or not specified
CVE-2024-45562
7.8
0%
May 6
Use After Free in HLOS
Affected: All versions, or not specified
CVE-2024-53030
7.8
0%
Mar 3
Improper Input Validation in Automotive OS Platform
Affected: All versions, or not specified
CVE-2024-45555
7.8
0%
Jan 6
Integer Overflow to Buffer Overflow in Automotive OS Platform
Affected: All versions, or not specified
CVE-2024-38423
7.8
0%
Nov 4
Buffer Copy Without Checking Size of Input in Graphics Linux
Affected: 0
CVE-2024-38422
7.8
0%
Nov 4
Integer Overflow to Buffer Overflow in Audio
Affected: 0
CVE-2024-33060
7.8
0%
Sep 2
Use After Free in DSP Service
Affected: 0
CVE-2024-33052
7.8
0%
Sep 2
Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in FM Host
Affected: 0
CVE-2024-33042
7.8
0%
Sep 2
Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in FM Host
Affected: 0
CVE-2024-23373
7.8
0%
Jul 1
Use After Free in Graphics
Affected: 0
CVE-2024-23368
7.8
0%
Jul 1
Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Qualcomm IPC
Affected: 0
CVE-2024-21461
7.8
0%
Jul 1
Double Free in HLOS
Affected: 0
CVE-2024-21468
7.8
0%
Apr 1
Use After Free in Kernel
Affected: 0
CVE-2023-33023
7.8
0%
Apr 1
Buffer Copy without Checking Size of Input (`Classic Buffer Overflow`) in SPS-Applications
Affected: 0
CVE-2023-28547
7.8
0%
Apr 1
Buffer Copy Without Checking Size of Input in SPS Applications
Affected: 0
CVE-2023-33069
7.8
0%
Feb 6
Buffer Copy Without Checking Size of Input in Audio
Affected: All versions, or not specified
CVE-2023-33068
7.8
0%
Feb 6
Buffer Copy Without Checking Size of Input in Audio
Affected: All versions, or not specified
CVE-2023-33067
7.8
0%
Feb 6
Use of Out-of-range Pointer Offset in Audio
Affected: 0
CVE-2023-33120
7.8
0%
Jan 2
Use After Free in Audio
Affected: All versions, or not specified
CVE-2023-33033
7.8
0%
Jan 2
Use of Out-of-range Pointer Offset in Audio
Affected: All versions, or not specified
CVE-2023-33030
7.8
0%
Jan 2
Buffer Copy without Checking Size of Input in HLOS
Affected: All versions, or not specified
CVE-2023-33018
7.8
0%
Dec 5
Integer Overflow to Buffer Overflow in User Identity Module
Affected: All versions, or not specified
CVE-2023-28551
7.8
0%
Dec 5
Improper Restriction of Operations within the Bounds of a Memory Buffer in UTILS
Affected: All versions, or not specified
CVE-2023-28550
7.8
0%
Dec 5
Improper Restriction of Operations within the Bounds of a Memory Buffer in MPP Performance
Affected: All versions, or not specified
Page 1 of 7 · 312 total
12…7
The 500 most important CVEs for this product (exploited first, then by severity)