← Back

Wcn3988 Firmware

wcn3988_firmware

Vendor: Qualcomm • 894 CVEs

CVEs (894)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Qualcomm
1865g Fixed Wireless Access Platform Firmware
Ar8035 FirmwareCsr8811 Firmware+183 more
Jul 22, 2026
Jun 1, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Information Disclosure when processing advertisement frames with malformed MBSSID elements of insufficient length.
1Qualcomm
141Cologne Firmware
Cq7790 FirmwareCq8725s Firmware+138 more
Jul 22, 2026
Jun 1, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory Corruption when writing to invalid memory locations occurs due to heap memory exhaustion during secure data initialization.
1Qualcomm
134Ar8035 Firmware
Csra6620 FirmwareCsra6640 Firmware+131 more
Jul 22, 2026
Jun 1, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory Corruption when processing device identifier strings that exceed the expected maximum length.
1Qualcomm
258Ar8035 Firmware
Cologne FirmwareCq7790 Firmware+255 more
Jul 22, 2026
Jun 1, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory Corruption when running a memory copy operation due to invalid writes caused by a null pointer.
1Qualcomm
176Ar8031 Firmware
Ar8035 FirmwareCsra6620 Firmware+173 more
Jun 29, 2026
May 4, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory Corruption when copying data from a freed source while executing performance counter deselect operation.
1Qualcomm
100Cq7790 Firmware
Cq8725s FirmwareFastconnect 6200 Firmware+97 more
Jun 17, 2026
May 4, 2026
N/A· v4
7.0 HIGH· v3
N/A· v2
Memory corruption while creating a process on the digital signal processor due to allocation failure at the kernel level.
1Qualcomm
183215 Mobile Firmware
5g Fixed Wireless Access FirmwareAr8031 Firmware+180 more
Jun 17, 2026
May 4, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified.
1Qualcomm
254Ar8035 Firmware
Cologne FirmwareCq7790 Firmware+251 more
Jun 17, 2026
May 4, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming.
1Qualcomm
241Ar8035 Firmware
Cologne FirmwareCq7790 Firmware+238 more
Jun 17, 2026
May 4, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Transient DOS when processing target power rate tables during channel configuration.
1Qualcomm
102Ar8035 Firmware
Cologne FirmwareFastconnect 6200 Firmware+99 more
Jun 17, 2026
Apr 6, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Transient DOS when receiving a service data frame with excessive length during device matching over a neighborhood awareness network protocol connection.
1Qualcomm
51Aqt1000 Firmware
Cologne FirmwareFastconnect 6200 Firmware+48 more
Jun 17, 2026
Apr 6, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver.
1Qualcomm
54Aqt1000 Firmware
Cologne FirmwareFastconnect 6200 Firmware+51 more
Jun 17, 2026
Apr 6, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver.
1Qualcomm
35Cologne Firmware
Fastconnect 6700 FirmwareFastconnect 6900 Firmware+32 more
Jun 17, 2026
Apr 6, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory Corruption when accessing an output buffer without validating its size during IOCTL processing.
1Qualcomm
54Aqt1000 Firmware
Cologne FirmwareFastconnect 6200 Firmware+51 more
Jun 17, 2026
Apr 6, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory Corruption when processing auxiliary sensor input/output control commands with insufficient buffer size validation.
1Qualcomm
54Aqt1000 Firmware
Cologne FirmwareFastconnect 6200 Firmware+51 more
Jun 17, 2026
Apr 6, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory Corruption when accessing an output buffer without validating its size during IOCTL processing.
1Qualcomm
28Cologne Firmware
Fastconnect 6700 FirmwareFastconnect 6900 Firmware+25 more
Jun 17, 2026
Apr 6, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory Corruption when sending IOCTL requests with invalid buffer sizes during memcpy operations.
1Qualcomm
52Aqt1000 Firmware
Cologne FirmwareFastconnect 6200 Firmware+49 more
Jun 17, 2026
Apr 6, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory Corruption when retrieving output buffer with insufficient size validation.
1Qualcomm
149Ar8035 Firmware
Cologne FirmwareCsr8811 Firmware+146 more
Jun 17, 2026
Apr 6, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Transient DOS when processing nonstandard FILS Discovery Frames with out-of-range action sizes during initial scans.
1Qualcomm
1485g Fixed Wireless Access Platform Firmware
Ar8035 FirmwareCsra6620 Firmware+145 more
Jun 17, 2026
Apr 6, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Memory corruption when decoding corrupted satellite data files with invalid signature offsets.
1Qualcomm
99Fastconnect 6200 Firmware
Fastconnect 6700 FirmwareFastconnect 6900 Firmware+96 more
Jun 17, 2026
Apr 6, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption while processing a frame request from user.