Skip to content

RadicalNotion.AI

We do not sell or share your personal information

© 2026 RadicalNotion.AI

Security Data

CWE Directory
CAPEC Directory
CNA Directory
CNA Report Cards
Data Sources

Calculators

CVSS Calculator
CVSS 4.0
CVSS 3.1
CVSS 3.0
CVSS 2.0

Platform

My Vulnerabilities
Insights
Notifications
Account
Pricing

Learn

All guides
What is a CVE?
What is CVSS?
The CISA KEV catalog
What is EPSS?

Company

About us
Blog
Book a demo

Get Started

Sign up
Log in

Legal

Privacy
Terms

Security data

Weaknesses (CWE)The MITRE CWE weakness catalog
Attack Patterns (CAPEC)MITRE CAPEC attack patterns
CNAsNumbering authorities + report cards
VendorsVulnerabilities by vendor

Tools

CVSS CalculatorScore CVSS 4.0, 3.1, 3.0 & 2.0

Resources

LearnPlain-English security guides
Data SourcesHow we source CVE data

About Us Blog Pricing Book a Demo

Log in

Home
Vendors
Qualcomm
Msm8909w Firmware

qualcomm msm8909w firmware Vulnerabilities: CVEs, CISA KEV & Security Advisories

630 CVEs

4 in CISA KEV

qualcomm msm8909w firmware Vulnerabilities

CVE security advisories and vulnerability history for msm8909w firmware by qualcomm.

630

Total CVEs

Published

4

In CISA KEV

Exploited in the wild

8

Public exploits

With known exploit

8.0

Avg CVSS

2018–2025

Last updated April 7, 2025

Overview

qualcomm msm8909w firmware has 630 published CVE records since 2018, of which 4 are in CISA's Known Exploited Vulnerabilities catalog and 8 have a known public exploit. The average CVSS base score across scored CVEs is 8.0.

This page aggregates every publicly disclosed vulnerability (CVE) affecting qualcomm msm8909w firmware, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of qualcomm msm8909w firmware's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical20

High110

Medium14

Low0

486 additional CVEs have no CVSS severity score.

In CISA’s Known Exploited Vulnerabilities catalog

4

4 of qualcomm msm8909w firmware's CVEs are confirmed exploited in the wild.

Public exploits

8

8 of qualcomm msm8909w firmware's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every qualcomm msm8909w firmware version named in a CVE, then pick one to see only the CVEs that affect it.

No specific affected versions are recorded for qualcomm msm8909w firmware; the CVEs below apply to the product without a version pin.

630 CVEs

Sort

Buffer Over-read in Data Network Stack & Connectivity
CVE-2024-45552CWE-126
High · CVSS 8.2
EPSS 0.2% (41th pct)2025-04-07
High vulnerability · 2024-12-02
CVE-2024-43052
Patch
CWE-20
High · CVSS 7.8
EPSS 0.1% (29th pct)2024-12-02
Buffer Over-read in IPA
CVE-2018-5852
Patch
CWE-126
High · CVSS 8.4
EPSS 0.1% (18th pct)2024-11-26
High vulnerability · 2024-11-26
CVE-2018-11952CWE-287
High · CVSS 7.8
EPSS 0.1% (21th pct)2024-11-26
High vulnerability · 2024-11-26
CVE-2017-11076CWE-823
High · CVSS 8.8
EPSS 0.3% (52th pct)2024-11-26
Medium vulnerability · 2024-11-22
CVE-2017-9711
Patch
CWE-264
Medium · CVSS 6.7
EPSS 0.0% (5th pct)2024-11-22
High vulnerability · 2024-11-04
CVE-2024-38423
Patch
CWE-120
High · CVSS 7.8
EPSS 0.2% (43th pct)2024-11-04
High vulnerability · 2024-11-04
CVE-2024-38422
Patch
CWE-680
High · CVSS 7.8
EPSS 0.2% (43th pct)2024-11-04
High vulnerability · 2024-09-02
CVE-2024-33052
Patch
CWE-120
High · CVSS 7.8
EPSS 0.1% (29th pct)2024-09-02
Buffer Over-read in FM Host
CVE-2024-33043CWE-126
Medium · CVSS 5.5
EPSS 0.1% (24th pct)2024-09-02
High vulnerability · 2024-09-02
CVE-2024-33042
Patch
CWE-120
High · CVSS 7.8
EPSS 0.1% (29th pct)2024-09-02
High vulnerability · 2024-08-05
CVE-2024-23353
Patch
CWE-126
High · CVSS 7.5
EPSS 0.2% (46th pct)2024-08-05
Critical vulnerability · 2024-06-03
CVE-2023-43551CWE-287
Critical · CVSS 9.1
EPSS 0.1% (26th pct)2024-06-03
High vulnerability · 2024-04-01
CVE-2024-21468
Patch
CWE-416
High · CVSS 8.4
EPSS 0.1% (19th pct)2024-04-01
High vulnerability · 2024-03-04
CVE-2023-33066
Patch
CWE-823
High · CVSS 8.4
EPSS 0.1% (22th pct)2024-03-04
Use After Free in Audio
CVE-2023-33120CWE-416
High · CVSS 7.8
EPSS 0.1% (33th pct)2024-01-02
High vulnerability · 2024-01-02
CVE-2023-33033CWE-823
High · CVSS 8.4
EPSS 0.1% (19th pct)2024-01-02
Buffer Copy without Checking Size of Input in HLOS
CVE-2023-33030CWE-120
Critical · CVSS 9.3
EPSS 0.1% (19th pct)2024-01-02
Integer Overflow or Wraparound in Graphics Linux
CVE-2023-33107
CISA KEV
Public exploit
Patch
CWE-190
Added to CISA KEV 2023-12-05
Critical · CVSS 9.4
EPSS 0.4% (62th pct)2023-12-05
Integer Overflow to Buffer Overflow in User Identity Module
CVE-2023-33018CWE-680
High · CVSS 7.8
EPSS 0.1% (19th pct)2023-12-05
Improper Restriction of Operations within the Bounds of a Memory Buffer in UTILS
CVE-2023-28551CWE-119
High · CVSS 7.8
EPSS 0.1% (19th pct)2023-12-05
High vulnerability · 2023-12-05
CVE-2023-28550CWE-119
High · CVSS 7.8
EPSS 0.1% (23th pct)2023-12-05
Buffer Copy Without Checking Size of Input in Audio
CVE-2023-33059CWE-191
High · CVSS 7.8
EPSS 0.1% (24th pct)2023-11-07
Use of Out-of-range Pointer Offset in Multi-mode Call Processor
CVE-2023-22388CWE-823
Critical · CVSS 9.8
EPSS 0.2% (44th pct)2023-11-07
High vulnerability · 2023-10-03
CVE-2023-24849CWE-126
High · CVSS 8.2
EPSS 0.1% (33th pct)2023-10-03
High vulnerability · 2023-10-03
CVE-2023-24848CWE-126
High · CVSS 8.2
EPSS 0.1% (31th pct)2023-10-03
High vulnerability · 2023-10-03
CVE-2023-22385CWE-126
High · CVSS 8.2
EPSS 0.1% (31th pct)2023-10-03
High vulnerability · 2023-09-05
CVE-2023-33020CWE-285
High · CVSS 7.5
EPSS 0.1% (23th pct)2023-09-05
High vulnerability · 2023-09-05
CVE-2023-33019CWE-285
High · CVSS 7.5
EPSS 0.1% (24th pct)2023-09-05
Critical vulnerability · 2023-08-08
CVE-2022-40510
Patch
CWE-457
Critical · CVSS 9.8
EPSS 0.2% (37th pct)2023-08-08

Showing 30 of 630

Common weakness types

The CWE weakness categories most often found in qualcomm msm8909w firmware CVEs. Follow any weakness for its full explanation.

CWE-126Buffer Over-read9 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')6 CVEs
CWE-416Use After Free6 CVEs
CWE-129Improper Validation of Array Index5 CVEs
CWE-823Use of Out-of-range Pointer Offset5 CVEs
CWE-680Integer Overflow to Buffer Overflow4 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer3 CVEs
CWE-285Improper Authorization3 CVEs

Disclosure activity by year

How many qualcomm msm8909w firmware CVEs were published each year.

2018

172

2019

164

2020

127

2021

63

2022

53

2023

33

2024

17

2025

1

Other qualcomm products

Browse vulnerabilities for other products by qualcomm.

wcd93801,205 CVEs wcd9380 firmware1,171 CVEs wsa88301,137 CVEs wsa88351,136 CVEs wcd93851,116 CVEs qca6574au1,105 CVEs wsa8830 firmware1,105 CVEs wsa8835 firmware1,104 CVEs

All qualcomm vulnerabilities

Frequently asked questions

Common questions about qualcomm msm8909w firmware vulnerabilities.

How many CVEs does qualcomm msm8909w firmware have?

qualcomm msm8909w firmware has 630 published CVE records since 2018.

How many qualcomm msm8909w firmware CVEs are in CISA KEV?

Yes — 4 of qualcomm msm8909w firmware's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Are there public exploits for qualcomm msm8909w firmware vulnerabilities?

Yes — 8 of qualcomm msm8909w firmware's CVEs have a known public exploit.

What are the most common weakness types in qualcomm msm8909w firmware CVEs?

qualcomm msm8909w firmware's CVEs most often map to these CWE weakness types: CWE-126 (Buffer Over-read), CWE-120 (Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')), CWE-416 (Use After Free), CWE-129 (Improper Validation of Array Index).

How many critical qualcomm msm8909w firmware vulnerabilities are there?

qualcomm msm8909w firmware has 20 critical and 110 high-severity CVEs.

What is the average severity of qualcomm msm8909w firmware CVEs?

The average CVSS base score across qualcomm msm8909w firmware's scored CVEs is 8.0.

References

All qualcomm vulnerabilities
The MITRE CVE Program (opens in a new tab)
Learn: What is a CVE?
CWE directory: the weakness types these CVEs map to

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track qualcomm msm8909w firmware vulnerabilities

Monitor new qualcomm msm8909w firmware vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing

On this page

Overview
Severity and exploitation
Affected versions and CVEs
Common weakness types
Disclosure activity
Other products
FAQ
References