Qualcomm 9205 Lte Modem Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Qualcomm 9205 Lte Modem Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (45)

• CVE-2023-22388 — CVSS 9.8 (critical): Memory Corruption in Multi-mode Call Processor while processing bit mask API.
• CVE-2023-33072 — CVSS 9.3 (critical): Memory corruption in Core while processing control functions.
• CVE-2023-33032 — CVSS 9.3 (critical): Memory corruption in TZ Secure OS while requesting a memory allocation from TA region.
• CVE-2023-33030 — CVSS 9.3 (critical): Memory corruption in HLOS while running playready use-case.
• CVE-2023-43551 — CVSS 9.1 (critical): Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send…
• CVE-2024-21461 — CVSS 8.4 (high): Memory corruption while performing finish HMAC operation when context is freed by keymaster.
• CVE-2022-40507 — CVSS 8.4 (high): Memory corruption due to double free in Core while mapping HLOS address to the list.
• CVE-2023-33066 — CVSS 8.4 (high): Memory corruption in Audio while processing RT proxy port register driver.
• CVE-2024-33056 — CVSS 8.4 (high): Memory corruption when allocating and accessing an entry in an SMEM partition continuously.
• CVE-2023-33033 — CVSS 8.4 (high): Memory corruption in Audio during playback with speaker protection.
• CVE-2023-24852 — CVSS 8.4 (high): Memory Corruption in Core due to secure memory access by user while loading modem image.
• CVE-2022-40532 — CVSS 8.4 (high): Memory corruption due to integer overflow or wraparound in WLAN while sending WMI cmd from host to target.
• CVE-2023-28545 — CVSS 8.2 (high): Memory corruption in TZ Secure OS while loading an app ELF.
• CVE-2022-33291 — CVSS 8.2 (high): Information disclosure in Modem due to buffer over-read while receiving a IP header with malformed length.
• CVE-2022-33287 — CVSS 8.2 (high): Information disclosure in Modem due to buffer over-read while getting length of Unfragmented headers in an IPv6 packet.
• CVE-2022-40505 — CVSS 8.2 (high): Information disclosure due to buffer over-read in Modem while parsing DNS hostname.
• CVE-2023-22385 — CVSS 8.2 (high): Memory Corruption in Data Modem while making a MO call or MT VOLTE call.
• CVE-2024-23359 — CVSS 8.2 (high): Information disclosure while decoding Tracking Area Update Accept or Attach Accept message received from network.
• CVE-2023-28585 — CVSS 8.2 (high): Memory corruption while loading an ELF segment in TEE Kernel.
• CVE-2025-27053 — CVSS 7.8 (high): Memory corruption during PlayReady APP usecase while processing TA commands.
• CVE-2024-21465 — CVSS 7.8 (high): Memory corruption while processing key blob passed by the user.
• CVE-2023-33017 — CVSS 7.8 (high): Memory corruption in Boot while running a ListVars test in UEFI Menu during boot.
• CVE-2023-33018 — CVSS 7.8 (high): Memory corruption while using the UIM diag command to get the operators name.
• CVE-2023-28550 — CVSS 7.8 (high): Memory corruption in MPP performance while accessing DSM watermark using external memory address.
• CVE-2023-28546 — CVSS 7.8 (high): Memory Corruption in SPS Application while exporting public key in sorter TA.
• CVE-2023-43542 — CVSS 7.8 (high): Memory corruption while copying a keyblob`s material when the key material`s size is not accurately checked.
• CVE-2023-28551 — CVSS 7.8 (high): Memory corruption in UTILS when modem processes memory specific Diag commands having arbitrary address values as input arguments.
• CVE-2025-27054 — CVSS 7.8 (high): Memory corruption while processing a malformed license file during reboot.
• CVE-2024-23353 — CVSS 7.5 (high): Transient DOS while decoding attach reject message received by UE, when IEI is set to ESM_IEI.
• CVE-2022-33304 — CVSS 7.5 (high): Transient DOS due to NULL pointer dereference in Modem while performing pullup for received TCP/UDP packet.
• CVE-2022-40521 — CVSS 7.5 (high): Transient DOS due to improper authorization in Modem
• CVE-2024-21469 — CVSS 7.3 (high): Memory corruption when an invoke call and a TEE call are bound for the same trusted application.
• CVE-2024-21462 — CVSS 7.1 (high): Transient DOS while loading the TA ELF file.
• CVE-2022-22076 — CVSS 7.1 (high): information disclosure due to cryptographic issue in Core during RPMB read request.
• CVE-2023-28556 — CVSS 7.1 (high): Cryptographic issue in HLOS during key management.
• CVE-2024-23362 — CVSS 7.1 (high): Cryptographic issue while parsing RSA keys in COBR format.
• CVE-2022-40523 — CVSS 7.1 (high): Information disclosure in Kernel due to indirect branch misprediction.
• CVE-2025-21482 — CVSS 7.1 (high): Cryptographic issue while performing RSA PKCS padding decoding.
• CVE-2022-33302 — CVSS 6.8 (medium): Memory corruption due to improper validation of array index in User Identity Module when APN TLV length is greater than command length.
• CVE-2024-33016 — CVSS 6.8 (medium): memory corruption when an invalid firehose patch command is invoked.
• CVE-2022-33289 — CVSS 6.8 (medium): Memory corruption occurs in Modem due to improper validation of array index when malformed APDU is sent from card.
• CVE-2025-21464 — CVSS 6.5 (medium): Information disclosure while reading data from an image using specified offset and size parameters.
• CVE-2025-21465 — CVSS 6.5 (medium): Information disclosure while processing the hash segment in an MBN file.
• CVE-2023-28586 — CVSS 6.0 (medium): Information disclosure when the trusted application metadata symbol addresses are accessed while loading an ELF in TEE.
• CVE-2024-43046 — CVSS 5.5 (medium): There may be information disclosure during memory re-allocation in TZ Secure OS.