VendorsQualcommmdm8207_firmwareany version
Vulnerabilities

Qualcomm MDM8207 Firmware any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

109CVEs
CVE-2023-28551
Improper Restriction of Operations within the Bounds of a Memory Buffer in UTILS
Published 2023-12-05 · Modified
7.8EPSS 0.001
CVE-2023-28550
Improper Restriction of Operations within the Bounds of a Memory Buffer in MPP Performance
Published 2023-12-05 · Modified
7.8EPSS 0.001
CVE-2023-33018
Integer Overflow to Buffer Overflow in User Identity Module
Published 2023-12-05 · Modified
7.8EPSS 0.001
CVE-2025-27053
Incorrect Calculation of Buffer Size in HLOS
Published 2025-10-09 · Analyzed
7.8EPSS 0.001
CVE-2020-11226
Out of bound memory read in Data modem while unpacking data due to lack of offset length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Published 2021-03-17 · Modified
7.5EPSS 0.009
CVE-2021-1914
Loop with unreachable exit condition may occur due to improper handling of unsupported input in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables
Published 2021-09-08 · Modified
7.5EPSS 0.006
CVE-2021-30273
Possible assertion due to improper handling of IPV6 packet with invalid length in destination options header in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables
Published 2022-01-03 · Modified
7.5EPSS 0.006
CVE-2021-30300
Possible denial of service due to incorrectly decoding hex data for the SIB2 OTA message and assigning a garbage value to choice when processing the SRS configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables
Published 2022-01-13 · Modified
7.5EPSS 0.006
CVE-2022-25742
Denial of service in modem due to infinite loop while parsing IGMPv2 packet from server in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music
Published 2022-11-15 · Modified
7.5EPSS 0.004
CVE-2022-25733
Null Pointer Dereference in MODEM
Published 2023-02-09 · Modified
7.5EPSS 0.004
CVE-2022-25734
Loop with Unreachable Exit Condition in MODEM
Published 2023-02-09 · Modified
7.5EPSS 0.004
CVE-2022-25735
Null Pointer Dereference in MODEM
Published 2023-02-09 · Modified
7.5EPSS 0.004
CVE-2022-33294
NULL pointer dereference in Modem
Published 2023-04-04 · Modified
7.5EPSS 0.004
CVE-2022-33304
NULL pointers dereference in Modem
Published 2023-05-02 · Modified
7.5EPSS 0.004
CVE-2022-33223
Null pointer dereference in Modem
Published 2023-04-04 · Modified
7.5EPSS 0.004
CVE-2022-25739
Null Point Dereference in MODEM
Published 2023-04-04 · Modified
7.5EPSS 0.004
CVE-2022-25737
Use of Uninitialized Variable in MODEM
Published 2023-04-04 · Modified
7.5EPSS 0.004
CVE-2022-40521
Improper authorization in Modem
Published 2023-06-06 · Modified
7.5EPSS 0.004
CVE-2022-25731
Incorrect Calculation of Buffer Size in MODEM
Published 2023-04-04 · Modified
7.5EPSS 0.004
CVE-2025-47383
Missing Cryptographic Step in Data Modem
Published 2026-03-02 · Analyzed
7.2EPSS 0.001
CVE-2020-11132
u'Buffer over read in boot due to size check ignored before copying GUID attribute from request to response' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8096AU, APQ8098, MDM8207, MDM9150, MDM9205, MDM9206, MDM9207, MDM9250, MDM9607, MDM9628, MDM9650, MSM8108, MSM8208, MSM8209, MSM8608, MSM8905, MSM8909, MSM8998, QCM4290, QCS405, QCS410, QCS4290, QCS603, QCS605, QCS610, QSM8250, SA415M, SA515M, SA6145P, SA6150P, SA6155, SA6155P, SA8150P, SA8155, SA8155P, SA8195P, SC7180, SC8180X, SC8180X+SDX55, SC8180XP, SDA640, SDA670, SDA845, SDA855, SDM1000, SDM640, SDM670, SDM710, SDM712, SDM830, SDM845, SDM850, SDX24, SDX50M, SDX55, SDX55M, SM4125, SM4250, SM4250P, SM6115, SM6115P, SM6125, SM6150, SM6150P, SM6250, SM6250P, SM6350, SM7125, SM7150, SM7150P, SM7225, SM7250, SM7250P, SM8150, SM8150P, SM8250, SXR1120, SXR1130, SXR2130, SXR2130P, WCD9330
Published 2020-11-12 · Modified
7.1EPSS 0.002
CVE-2021-1935
Possible null pointer dereference due to lack of validation check for passed pointer during key import in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables
Published 2021-09-09 · Modified
7.1EPSS 0.001
CVE-2022-22076
Cryptographic issue in Core
Published 2023-06-06 · Modified
7.1EPSS 0.001
CVE-2023-21626
Improper Authentication in HLOS.
Published 2023-08-08 · Modified
7.1EPSS 0.001
CVE-2025-21482
Cryptographic Issues in Core
Published 2025-09-24 · Analyzed
7.1EPSS 0.001
CVE-2022-33289
Improper validation of array index in Modem
Published 2023-04-04 · Modified
6.8EPSS 0.002
CVE-2020-11221
Usage of syscall by non-secure entity can allow extraction of secure QTEE diagnostic information in clear text form due to insufficient checks in the syscall handler and leads to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
Published 2021-03-17 · Modified
5.5EPSS 0.002
CVE-2020-11199
HLOS to access EL3 stack canary by just mapping imem region due to Improper access control and can lead to information exposure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
Published 2021-03-17 · Modified
5.5EPSS 0.002
CVE-2020-11123
u'information disclosure in gatekeeper trustzone implementation as the throttling mechanism to prevent brute force attempts at getting user`s lock-screen password can be bypassed by performing the standard gatekeeper operations.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8009W, APQ8017, APQ8037, APQ8053, APQ8064AU, APQ8096, APQ8096AU, APQ8096SG, APQ8098, MDM8207, MDM9150, MDM9205, MDM9206, MDM9207, MDM9250, MDM9607, MDM9628, MDM9640, MDM9650, MDM9655, MSM8108, MSM8208, MSM8209, MSM8608, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8996SG, MSM8998, QCM4290, QCS405, QCS410, QCS4290, QCS603, QCS605, QCS610, QM215, QSM8250, QSM8350, SA415M, SA515M, SA6145P, SA6150P, SA6155, SA6155P, SA8150P, SA8155, SA8155P, SA8195P, SC7180, SC8180X, SC8180XP, SDA429W, SDA640, SDA660, SDA670, SDA845, SDA855, SDM1000, SDM429, SDM429W, SDM439, SDM450, SDM455, SDM630, SDM632, SDM636, SDM640, SDM660, SDM670, SDM710, SDM712, SDM830, SDM845, SDM850, SDW2500, SDX24, SDX50M, SDX55, SDX55M, SM4125, SM4250, SM4250P, SM6115, SM6115P, SM6125, SM6150, SM6150P, SM6250, SM6250P, SM6350, SM7125, SM7150, SM7150P, SM7225, SM7250, SM7250P, SM8150, SM8150P, SM8250, SM8350, SM8350P, SXR1120, SXR1130, SXR2130, SXR2130P, WCD9330
Published 2020-11-12 · Modified
5.5EPSS 0.002
← Prev3 / 3