Vulnerabilities (CVE)

Filtered by vendor Qualcomm Subscribe
Filtered by product Wcn3990
Total 580 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-33092 1 Qualcomm 190 Aqt1000, Aqt1000 Firmware, Fastconnect 6200 and 187 more 2025-08-07 N/A 8.4 HIGH
Memory corruption while processing pin reply in Bluetooth, when pin code received from APP layer is greater than expected size.
CVE-2023-21629 1 Qualcomm 424 205, 205 Firmware, 215 and 421 more 2025-08-07 N/A 6.8 MEDIUM
Memory Corruption in Modem due to double free while parsing the PKCS15 sim files.
CVE-2025-21459 1 Qualcomm 248 Ar8035, Ar8035 Firmware, Fastconnect 6700 and 245 more 2025-08-07 N/A 7.5 HIGH
Transient DOS while parsing per STA profile in ML IE.
CVE-2023-24851 1 Qualcomm 382 Ar8035, Ar8035 Firmware, Csr8811 and 379 more 2025-08-07 N/A 7.8 HIGH
Memory Corruption in WLAN HOST while parsing QMI response message from firmware.
CVE-2023-24854 1 Qualcomm 326 215, 215 Firmware, Ar8035 and 323 more 2025-08-07 N/A 7.8 HIGH
Memory Corruption in WLAN HOST while parsing QMI WLAN Firmware response message.
CVE-2023-43533 1 Qualcomm 476 315 5g Iot Modem, 315 5g Iot Modem Firmware, Aqt1000 and 473 more 2025-08-07 N/A 7.5 HIGH
Transient DOS in WLAN Firmware when the length of received beacon is less than length of ieee802.11 beacon frame.
CVE-2023-43527 1 Qualcomm 108 Fastconnect 6800, Fastconnect 6800 Firmware, Fastconnect 6900 and 105 more 2025-08-07 N/A 6.8 MEDIUM
Information disclosure while parsing dts header atom in Video.
CVE-2024-53023 1 Qualcomm 206 Ar8035, Ar8035 Firmware, Fastconnect 6900 and 203 more 2025-08-07 N/A 7.8 HIGH
Memory corruption may occur while accessing a variable during extended back to back tests.
CVE-2023-28547 1 Qualcomm 604 215 Mobile, 215 Mobile Firmware, 315 5g Iot and 601 more 2025-08-07 N/A 8.4 HIGH
Memory corruption in SPS Application while requesting for public key in sorter TA.
CVE-2023-33066 1 Qualcomm 626 205 Mobile, 205 Mobile Firmware, 215 Mobile and 623 more 2025-08-07 N/A 8.4 HIGH
Memory corruption in Audio while processing RT proxy port register driver.
CVE-2023-24850 1 Qualcomm 412 Apq5053-aa, Apq5053-aa Firmware, Apq8017 and 409 more 2025-08-07 N/A 7.8 HIGH
Memory Corruption in HLOS while importing a cryptographic key into KeyMaster Trusted Application.
CVE-2024-33050 1 Qualcomm 514 Ar8035, Ar8035 Firmware, Ar9380 and 511 more 2025-08-07 N/A 7.5 HIGH
Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing or improper.
CVE-2023-33106 1 Qualcomm 306 Ar8035, Ar8035 Firmware, Csra6620 and 303 more 2025-08-07 N/A 8.4 HIGH
Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.
CVE-2024-38426 1 Qualcomm 328 205, 205 Firmware, 215 and 325 more 2025-08-07 N/A 5.4 MEDIUM
While processing the authentication message in UE, improper authentication may lead to information disclosure.
CVE-2025-27061 1 Qualcomm 688 315 5g Iot, 315 5g Iot Firmware, Aqt1000 and 685 more 2025-08-07 N/A 7.8 HIGH
Memory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the video firmware.
CVE-2023-24849 1 Qualcomm 476 315 5g Iot Modem, 315 5g Iot Modem Firmware, 9206 Lte Modem and 473 more 2025-08-07 N/A 8.2 HIGH
Information Disclosure in data Modem while parsing an FMTP line in an SDP message.
CVE-2023-28539 1 Qualcomm 314 Ar8035, Ar8035 Firmware, Ar9380 and 311 more 2025-08-07 N/A 6.6 MEDIUM
Memory corruption in WLAN Host when the firmware invokes multiple WMI Service Available command.
CVE-2023-24847 1 Qualcomm 514 315 5g Iot Modem, 315 5g Iot Modem Firmware, Aqt1000 and 511 more 2025-08-07 N/A 7.5 HIGH
Transient DOS in Modem while allocating DSM items.
CVE-2023-28588 1 Qualcomm 428 Apq8017, Apq8017 Firmware, Apq8064au and 425 more 2025-08-07 N/A 7.5 HIGH
Transient DOS in Bluetooth Host while rfc slot allocation.
CVE-2025-21468 1 Qualcomm 302 Ar8035, Ar8035 Firmware, Csra6620 and 299 more 2025-08-07 N/A 7.8 HIGH
Memory corruption while reading response from FW, when buffer size is changed by FW while driver is using this size to write null character at the end of buffer.