Vulnerabilities > Qualcomm > Mdm9640 Firmware
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-11-26 | CVE-2018-5852 | Integer Underflow (Wrap or Wraparound) vulnerability in Qualcomm products An unsigned integer underflow vulnerability in IPA driver result into a buffer over-read while reading NAT entry using debugfs command 'cat /sys/kernel/debug/ipa/ip4_nat' | 7.8 |
| 2024-11-26 | CVE-2018-11922 | Unspecified vulnerability in Qualcomm products Wrong configuration in Touch Pal application can collect user behavior data without awareness by the user. | 5.5 |
| 2024-11-26 | CVE-2018-11952 | Improper Authentication vulnerability in Qualcomm products An image with a version lower than the fuse version may potentially be booted lead to improper authentication. | 7.8 |
| 2024-11-22 | CVE-2017-9711 | Unspecified vulnerability in Qualcomm products Certain unprivileged processes are able to perform IOCTL calls. | 7.8 |
| 2024-11-04 | CVE-2024-38422 | Unspecified vulnerability in Qualcomm products Memory corruption while processing voice packet with arbitrary data received from ADSP. | 7.8 |
| 2024-09-02 | CVE-2024-33051 | Out-of-bounds Read vulnerability in Qualcomm products Transient DOS while processing TIM IE from beacon frame as there is no check for IE length. | 7.5 |
| 2024-07-01 | CVE-2024-21461 | Double Free vulnerability in Qualcomm products Memory corruption while performing finish HMAC operation when context is freed by keymaster. | 7.8 |
| 2024-06-03 | CVE-2023-43551 | Improper Authentication vulnerability in Qualcomm products Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command. | 7.5 |
| 2024-04-01 | CVE-2023-28547 | Out-of-bounds Write vulnerability in Qualcomm products Memory corruption in SPS Application while requesting for public key in sorter TA. | 7.8 |
| 2024-04-01 | CVE-2023-33023 | Classic Buffer Overflow vulnerability in Qualcomm products Memory corruption while processing finish_sign command to pass a rsp buffer. | 7.8 |