← Back

Wcn3988 Firmware

wcn3988_firmware

Vendor: Qualcomm • 894 CVEs

CVEs (894)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Qualcomm
117Ar8035 Firmware
Fastconnect 6200 FirmwareFastconnect 6700 Firmware+114 more
Jun 17, 2026
Nov 4, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption during GNSS HAL process initialization.
1Qualcomm
203205 Mobile Platform Firmware
215 Mobile Platform Firmware315 5g Iot Modem Firmware+200 more
Jun 17, 2026
Nov 4, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption while processing GPU page table switch.
1Qualcomm
263205 Mobile Platform Firmware
215 Mobile Platform Firmware315 5g Iot Modem Firmware+260 more
Jun 17, 2026
Nov 4, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption while processing voice packet with arbitrary data received from ADSP.
1Qualcomm
76Fastconnect 6200 Firmware
Fastconnect 7800 FirmwareQam8255p Firmware+73 more
Jun 17, 2026
Nov 4, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption while processing GPU commands.
1Qualcomm
146Ar8035 Firmware
Csra6620 FirmwareCsra6640 Firmware+143 more
Jun 17, 2026
Nov 4, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node.
1Qualcomm
172215 Mobile Platform Firmware
Ar8035 FirmwareCsra6620 Firmware+169 more
Jun 17, 2026
Nov 4, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption while handling session errors from firmware.
1Qualcomm
229315 5g Iot Modem Firmware
Aqt1000 FirmwareAr8035 Firmware+226 more
Jun 17, 2026
Nov 4, 2024
N/A· v4
9.1 CRITICAL· v3
N/A· v2
Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions.
1Qualcomm
67C V2x 9150 Firmware
Fastconnect 6200 FirmwareFastconnect 6700 Firmware+64 more
Jun 17, 2026
Nov 4, 2024
N/A· v4
6.7 MEDIUM· v3
N/A· v2
Memory corruption when the user application modifies the same shared memory asynchronously when kernel is accessing it.
1Qualcomm
91205 Mobile Platform Firmware
Apq8017 FirmwareApq8037 Firmware+88 more
Jun 17, 2026
Nov 4, 2024
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Transient DOS as modem reset occurs when an unexpected MAC RAR (with invalid PDU length) is seen at UE.
1Qualcomm
62Fastconnect 6700 Firmware
Fastconnect 6800 FirmwareFastconnect 6900 Firmware+59 more
Jun 17, 2026
Oct 7, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption while maintaining memory maps of HLOS memory.
1Qualcomm
44Fastconnect 6800 Firmware
Fastconnect 6900 FirmwareFastconnect 7800 Firmware+41 more
Jun 17, 2026
Oct 7, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
Transient DOS when transmission of management frame sent by host is not successful and error status is received in the host.
1Qualcomm
131Csr8811 Firmware
Fastconnect 6700 FirmwareFastconnect 7800 Firmware+128 more
Jun 17, 2026
Oct 7, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
Transient DOS while parsing noninheritance IE of Extension element when length of IE is 2 of beacon frame.
1Qualcomm
21Fastconnect 6900 Firmware
Fastconnect 7800 FirmwareQca6174a Firmware+18 more
Jun 17, 2026
Oct 7, 2024
N/A· v4
6.7 MEDIUM· v3
N/A· v2
Memory corruption while sending the persist buffer command packet from the user-space to the kernel space through the IOCTL call.
1Qualcomm
14Sa4150p Firmware
Sa4155p FirmwareSa6155p Firmware+11 more
Jun 17, 2026
Oct 7, 2024
N/A· v4
6.7 MEDIUM· v3
N/A· v2
Memory corruption during the network scan request.
1Qualcomm
26Fastconnect 6900 Firmware
Fastconnect 7800 FirmwareQca6174a Firmware+23 more
Jun 17, 2026
Oct 7, 2024
N/A· v4
6.7 MEDIUM· v3
N/A· v2
Memory corruption is possible when an attempt is made from userspace or console to write some haptics effects pattern to the haptics debugfs file.
1Qualcomm
11Qca6584au Firmware
Qca6698aq FirmwareQca9367 Firmware+8 more
Jun 17, 2026
Oct 7, 2024
N/A· v4
6.7 MEDIUM· v3
N/A· v2
Memory corruption when a process invokes IOCTL calls from user-space to create a HAB virtual channel and another process invokes IOCTL calls to destroy the same.
1Qualcomm
118Ar8035 Firmware
Fastconnect 6200 FirmwareFastconnect 6700 Firmware+115 more
Jun 17, 2026
Oct 7, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption when invalid length is provided from HLOS for FRS/UDS request/response buffers.
1Qualcomm
163Ar8035 Firmware
Csra6620 FirmwareCsra6640 Firmware+160 more
Jun 17, 2026
Sep 2, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption while processing IOCTL call for getting group info.
1Qualcomm
40Ar8035 Firmware
C V2x 9150 FirmwareFastconnect 7800 Firmware+37 more
Jun 17, 2026
Sep 2, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption while processing concurrent IOCTL calls.
1Qualcomm
243215 Mobile Firmware
315 5g Iot FirmwareAqt1000 Firmware+240 more
Jun 17, 2026
Sep 2, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption when two threads try to map and unmap a single node simultaneously.