CVE Intelligence

Qualcomm Mdm9628 Firmware vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Qualcomm Mdm9628 Firmware: 20 record(s), with affected versions and fixes.
cpe:2.3:o:qualcomm:mdm9628_firmware

CVE-2026-57554 High · 7.8 CWE-416 Oct 6, 2026
Use After Free in DSP Service
Memory Corruption when asynchronous threads access shared performance counter data simultaneously during FastRPC invocations.
CVE-2026-24088 High · 8.2 CWE-306 Jun 1, 2026
Missing Authentication for Critical Function in Boot
Cryptographic Issue while processing a specific partition which allows unauthorized write access to load a customized bootloader.
CVE-2026-24082 High · 7.8 CWE-416 May 4, 2026
Use After Free in Automotive GPU
Memory Corruption when copying data from a freed source while executing performance counter deselect operation.
CVE-2025-47404 High · 7.8 CWE-787 May 4, 2026
Buffer Copy Without Checking Size of Input in Automotive Audio
Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified.
CVE-2026-21385 High · 7.8 KEV High · 57 Public exploit CWE-190 Mar 2, 2026
Qualcomm Multiple Chipsets Memory Corruption Vulnerability
Memory corruption while using alignments for memory allocation.
CVE-2025-59600 High · 7.8 CWE-126 Mar 2, 2026
Buffer Over-read in Graphics
Memory Corruption when adding user-supplied data without checking available buffer space.
CVE-2025-47386 High · 7.8 CWE-416 Mar 2, 2026
Use After Free in Automotive Audio
Memory Corruption while invoking IOCTL calls when concurrent access to shared buffer occurs.
CVE-2025-47383 High · 7.2 CWE-325 Mar 2, 2026
Missing Cryptographic Step in Data Modem
Weak configuration may lead to cryptographic issue when a VoWiFi call is triggered from UE.
CVE-2025-47379 High · 7.8 CWE-416 Mar 2, 2026
Use After Free in Automotive Audio
Memory Corruption when concurrent access to shared buffer occurs due to improper synchronization between assignment and deallocation of buffer resources.
CVE-2025-47376 High · 7.8 CWE-416 Mar 2, 2026
Use After Free in Automotive Audio
Memory Corruption when concurrent access to shared buffer occurs during IOCTL calls.
CVE-2025-47375 High · 7.8 CWE-416 Mar 2, 2026
Use After Free in Automotive Audio
Memory corruption while handling different IOCTL calls from the user-space simultaneously.
CVE-2025-47369 Medium · 5.5 CWE-200 Jan 7, 2026
Information Exposure in Computer Vision
Information disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a session ID.
CVE-2025-47333 Medium · 6.6 CWE-416 Jan 7, 2026
Use After Free in HLOS
Memory corruption while handling buffer mapping operations in the cryptographic driver.
CVE-2025-47331 Medium · 6.1 CWE-126 Jan 7, 2026
Buffer Over-read in Video
Information disclosure while processing a firmware event.
CVE-2025-47330 Medium · 5.5 CWE-126 Jan 7, 2026
Buffer Over-read in Video
Transient DOS while parsing video packets received from the video firmware.
CVE-2025-47320 High · 7.8 CWE-787 Dec 18, 2025
Out-of-bounds Write in Audio
Memory corruption while processing MFC channel configuration during music playback.
CVE-2025-27064 Medium · 6.1 CWE-126 Nov 4, 2025
Buffer Over-read in Core Services
Information disclosure while registering commands from clients with diag through diagHal.
CVE-2025-27053 High · 7.8 CWE-131 Oct 9, 2025
Incorrect Calculation of Buffer Size in HLOS
Memory corruption during PlayReady APP usecase while processing TA commands.
CVE-2021-1905 High · 7.8 KEV High · 58 Public exploit CWE-416 May 7, 2021
Qualcomm Multiple Chipsets Use-After-Free Vulnerability
Possible use after free due to improper handling of memory mapping of multiple processes simultaneously. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2021-1906 Medium · 5.5 KEV May 7, 2021
Qualcomm Multiple Chipsets Detection of Error Condition Without Action Vulnerability
Improper handling of address deregistration on failure can lead to new GPU address allocation failure. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables