MSM8940 Firmware
213 CVEs tracked. 1 of them are in CISA KEV.
This hub aggregates every CVE we track for MSM8940 Firmware, a product in the hardware firmware space. Use it to gauge the current risk picture and drill into individual advisories.
MSM8940 Firmware CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 0 |
| 2024-11 | 0 |
| 2024-12 | 0 |
| 2025-01 | 0 |
| 2025-02 | 0 |
| 2025-03 | 0 |
| 2025-04 | 0 |
| 2025-05 | 0 |
| 2025-06 | 0 |
| 2025-07 | 0 |
| 2025-08 | 0 |
| 2025-09 | 0 |
| 2025-10 | 0 |
| 2025-11 | 0 |
| 2025-12 | 0 |
| 2026-01 | 0 |
| 2026-02 | 0 |
| 2026-03 | 0 |
| 2026-04 | 0 |
| 2026-05 | 0 |
| 2026-06 | 0 |
| 2026-07 | 0 |
| 2026-08 | 0 |
| 2026-09 | 0 |
Severity
How the 213 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- Critical86
- High107
- Medium20
Latest CVEs
The 15 most recently published vulnerabilities affecting MSM8940 Firmware.
- CVE-2023-21626Improper Authentication in HLOS.7.1
- CVE-2022-40510Buffer copy without checking size of input in Audio.9.8
- CVE-2022-33213Memory Corruption in MODEM7.5
- CVE-2022-25705Integer Overflow to Buffer Overflow in Modem7.8
- CVE-2022-25694Use of Out-of-range Pointer Offset in MODEM8.4
- CVE-2022-33233Configuration weakness in modem7.8
- CVE-2022-25682Memory corruption in MODEM UIM due to usage of out of range pointer offset while decoding command from card in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,...8.4
- CVE-2022-25695Memory corruption in MODEM due to Improper Validation of Array Index while processing GSTK Proactive commands in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IO...8.4
- CVE-2022-25718Cryptographic issue in WLAN due to improper check on return value while authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdrago...9.1
- CVE-2022-25719Information disclosure in WLAN due to improper length check while processing authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snap...8.2
- CVE-2022-22091Improper authorization of a replayed LTE security mode command can lead to a denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon I...7.5
- CVE-2022-22062An out-of-bounds read can occur while parsing a server certificate due to improper length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Conn...8.2
- CVE-2021-35135A null pointer dereference may potentially occur during RSA key import in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdrago...6.2
- CVE-2021-35072Possible buffer overflow due to improper validation of array index while processing external DIAG command in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, ...7.8
- CVE-2021-35083Possible out of bound read due to improper validation of certificate chain in SSL or Internet key exchange in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Elect...8.2
Product grouping is registry-driven, with AI assist and human review. How it works