← Back

Wcn3950 Firmware

wcn3950_firmware

Vendor: Qualcomm • 852 CVEs

CVEs (852)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Qualcomm
21Fastconnect 6700 Firmware
Fastconnect 6900 FirmwareFastconnect 7800 Firmware+18 more
Jan 10, 2025
Jan 6, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption while processing IPA statistics, when there are no active clients registered.
1Qualcomm
50Fastconnect 6200 Firmware
Fastconnect 6900 FirmwareFastconnect 7800 Firmware+47 more
Dec 12, 2024
Dec 2, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption when invalid input is passed to invoke GPU Headroom API call.
1Qualcomm
55C V2x 9150 Firmware
Fastconnect 6200 FirmwareFastconnect 6800 Firmware+52 more
Dec 12, 2024
Dec 2, 2024
N/A· v4
6.7 MEDIUM· v3
N/A· v2
Memory corruption when multiple threads try to unregister the CVP buffer at the same time.
1Qualcomm
208315 5g Iot Modem Firmware
Aqt1000 FirmwareAr8035 Firmware+205 more
Dec 12, 2024
Dec 2, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption while Configuring the SMR/S2CR register in Bypass mode.
1Qualcomm
50C V2x 9150 Firmware
Fastconnect 6800 FirmwareFastconnect 6900 Firmware+47 more
Dec 11, 2024
Dec 2, 2024
N/A· v4
6.1 MEDIUM· v3
N/A· v2
Information disclosure as NPU firmware can send invalid IPC message to NPU driver as the driver doesn`t validate the IPC message received from the firmware.
1Qualcomm
51C V2x 9150 Firmware
Fastconnect 6800 FirmwareFastconnect 6900 Firmware+48 more
Dec 11, 2024
Dec 2, 2024
N/A· v4
6.7 MEDIUM· v3
N/A· v2
Memory corruption while parsing sensor packets in camera driver, user-space variable is used while allocating memory in kernel and parsing which can lead to huge allocation or invalid memory access.
1Qualcomm
84Apq8096au Firmware
Ar8031 FirmwareAr8035 Firmware+81 more
Nov 25, 2024
Nov 22, 2024
N/A· v4
6.7 MEDIUM· v3
N/A· v2
Possible out of bound access in audio module due to lack of validation of user provided input.
1Qualcomm
117Ar8035 Firmware
Fastconnect 6200 FirmwareFastconnect 6700 Firmware+114 more
Nov 7, 2024
Nov 4, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption during GNSS HAL process initialization.
1Qualcomm
203205 Mobile Platform Firmware
215 Mobile Platform Firmware315 5g Iot Modem Firmware+200 more
Nov 7, 2024
Nov 4, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption while processing GPU page table switch.
1Qualcomm
263205 Mobile Platform Firmware
215 Mobile Platform Firmware315 5g Iot Modem Firmware+260 more
Nov 7, 2024
Nov 4, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption while processing voice packet with arbitrary data received from ADSP.
1Qualcomm
76Fastconnect 6200 Firmware
Fastconnect 7800 FirmwareQam8255p Firmware+73 more
Nov 7, 2024
Nov 4, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption while processing GPU commands.
1Qualcomm
146Ar8035 Firmware
Csra6620 FirmwareCsra6640 Firmware+143 more
Nov 7, 2024
Nov 4, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node.
1Qualcomm
172215 Mobile Platform Firmware
Ar8035 FirmwareCsra6620 Firmware+169 more
Nov 7, 2024
Nov 4, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption while handling session errors from firmware.
1Qualcomm
229315 5g Iot Modem Firmware
Aqt1000 FirmwareAr8035 Firmware+226 more
Nov 8, 2024
Nov 4, 2024
N/A· v4
9.1 CRITICAL· v3
N/A· v2
Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions.
1Qualcomm
67C V2x 9150 Firmware
Fastconnect 6200 FirmwareFastconnect 6700 Firmware+64 more
Nov 7, 2024
Nov 4, 2024
N/A· v4
6.7 MEDIUM· v3
N/A· v2
Memory corruption when the user application modifies the same shared memory asynchronously when kernel is accessing it.
1Qualcomm
91205 Mobile Platform Firmware
Apq8017 FirmwareApq8037 Firmware+88 more
Nov 7, 2024
Nov 4, 2024
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Transient DOS as modem reset occurs when an unexpected MAC RAR (with invalid PDU length) is seen at UE.
1Qualcomm
62Fastconnect 6700 Firmware
Fastconnect 6800 FirmwareFastconnect 6900 Firmware+59 more
Oct 28, 2025
Oct 7, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption while maintaining memory maps of HLOS memory.
1Qualcomm
40Fastconnect 6900 Firmware
Fastconnect 7800 FirmwareQam8255p Firmware+37 more
Oct 16, 2024
Oct 7, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption while processing user packets to generate page faults.
1Qualcomm
131Csr8811 Firmware
Fastconnect 6700 FirmwareFastconnect 7800 Firmware+128 more
Aug 11, 2025
Oct 7, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
Transient DOS while parsing noninheritance IE of Extension element when length of IE is 2 of beacon frame.
1Qualcomm
118Ar8035 Firmware
Fastconnect 6200 FirmwareFastconnect 6700 Firmware+115 more
Aug 11, 2025
Oct 7, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption when invalid length is provided from HLOS for FRS/UDS request/response buffers.