Mdm9205 Firmware vulnerabilities

6 known vulnerabilities in Mdm9205 Firmware from Qualcomm. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Snapdragon Auto, Snapdragon Compute…: Improper Validation of Array Index

  CVE-2022-25695Dec 13, 2022Qualcomm

  Memory corruption in MODEM due to Improper Validation of Array Index while processing GSTK Proactive commands in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile

• 7.8 High severity

  Snapdragon Auto, Snapdragon Compute…: Improper Restriction of Operations within the Bounds of a Memory Buffer

  CVE-2022-25682Dec 13, 2022Qualcomm

  Memory corruption in MODEM UIM due to usage of out of range pointer offset while decoding command from card in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice

• 7.5 High severity

  Snapdragon Consumer IOT, Snapdragon Industrial…: Loop with Unreachable Exit Condition

  CVE-2022-25742Nov 15, 2022Qualcomm

  Denial of service in modem due to infinite loop while parsing IGMPv2 packet from server in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music

• 9.8 Critical severity

  Snapdragon Consumer IOT, Snapdragon Industrial…: Improper Validation of Specified Quantity in Input

  CVE-2022-25727Nov 15, 2022Qualcomm

  Memory Corruption in modem due to improper length check while copying into memory in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music

• 9.1 Critical severity

  Snapdragon Auto, Snapdragon Connectivity…: Out-of-bounds Read

  CVE-2022-25719Oct 19, 2022Qualcomm

  Information disclosure in WLAN due to improper length check while processing authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT,

• 9.8 Critical severity

  Snapdragon Auto, Snapdragon Connectivity…: Unchecked Return Value

  CVE-2022-25718Oct 19, 2022Qualcomm

  Cryptographic issue in WLAN due to improper check on return value while authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snap