← Back

Wcn3990 Firmware

wcn3990_firmware

Vendor: Qualcomm • 601 CVEs

CVEs (601)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Qualcomm
94Ar8035 Firmware
Fastconnect 6700 FirmwareFastconnect 6800 Firmware+91 more
Jun 17, 2026
Aug 5, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
Transient DOS during music playback of ALAC content.
1Qualcomm
104Fastconnect 6200 Firmware
Fastconnect 6700 FirmwareFastconnect 6900 Firmware+101 more
Jun 17, 2026
Jul 1, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption while handling user packets during VBO bind operation.
1Qualcomm
220205 Mobile Platform Firmware
215 Mobile Platform Firmware315 5g Iot Modem Firmware+217 more
Jun 17, 2026
Jul 1, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption when IOMMU unmap operation fails, the DMA and anon buffers are getting released.
1Qualcomm
341Apq8064au Firmware
Aqt1000 FirmwareAr8035 Firmware+338 more
Jun 17, 2026
Jul 1, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption when allocating and accessing an entry in an SMEM partition.
1Qualcomm
2229205 Lte Modem Firmware
Aqt1000 FirmwareAr8031 Firmware+219 more
Jun 17, 2026
Jul 1, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption when an invoke call and a TEE call are bound for the same trusted application.
1Qualcomm
2579205 Lte Modem Firmware
Aqt1000 FirmwareAr8031 Firmware+254 more
Jun 17, 2026
Jul 1, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption while processing key blob passed by the user.
1Qualcomm
309315 5g Iot Modem Firmware
9205 Lte Modem FirmwareAqt1000 Firmware+306 more
Jun 17, 2026
Jul 1, 2024
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Transient DOS while loading the TA ELF file.
1Qualcomm
311215 Mobile Platform Firmware
315 5g Iot Modem Firmware9205 Lte Modem Firmware+308 more
Jun 17, 2026
Jul 1, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption while performing finish HMAC operation when context is freed by keymaster.
1Qualcomm
234205 Mobile Firmware
215 Mobile Firmware315 5g Iot Modem Firmware+231 more
Jun 17, 2026
Jun 3, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command.
1Qualcomm
28Ar8035 Firmware
Fastconnect 7800 FirmwareQca6554a Firmware+25 more
Jun 17, 2026
Jun 3, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption when more scan frequency list or channels are sent from the user space.
1Qualcomm
2029205 Lte Modem Firmware
Aqt1000 FirmwareAr8031 Firmware+199 more
Jun 17, 2026
Jun 3, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption while copying a keyblob`s material when the key material`s size is not accurately checked.
1Qualcomm
133Aqt1000 Firmware
Ar8035 FirmwareFastconnect 6200 Firmware+130 more
Jun 17, 2026
Jun 3, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption in TZ Secure OS while Tunnel Invoke Manager initialization.
1Qualcomm
182Aqt1000 Firmware
Ar8035 FirmwareCsr8811 Firmware+179 more
Jun 17, 2026
May 6, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
Transient DOS while parsing a protected 802.11az Fine Time Measurement (FTM) frame.
1Qualcomm
229215 Mobile Firmware
315 5g Iot Modem FirmwareAqt1000 Firmware+226 more
Jun 17, 2026
May 6, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption when the payload received from firmware is not as per the expected protocol size.
1Qualcomm
169205 Mobile Firmware
215 Mobile FirmwareAr8035 Firmware+166 more
Jun 17, 2026
May 6, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption when IOMMU unmap of a GPU buffer fails in Linux.
1Qualcomm
154Aqt1000 Firmware
Ar8035 FirmwareFastconnect 6200 Firmware+151 more
Jun 17, 2026
May 6, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption in HLOS while checking for the storage type.
1Qualcomm
154315 5g Iot Modem Firmware
Aqt1000 FirmwareAr8035 Firmware+151 more
Jun 17, 2026
May 6, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
Transient DOS while processing IKEv2 Informational request messages, when a malformed fragment packet is received.
1Qualcomm
90Ar8035 Firmware
C V2x 9150 FirmwareCsrb31024 Firmware+87 more
Jun 17, 2026
May 6, 2024
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Information disclosure when the ADSP payload size received in HLOS in response to Audio Stream Manager matrix session is less than this expected size.
1Qualcomm
53Fastconnect 6800 Firmware
Fastconnect 6900 FirmwareFastconnect 7800 Firmware+50 more
Jun 17, 2026
May 6, 2024
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Information disclosure while parsing dts header atom in Video.
1Qualcomm
157Aqt1000 Firmware
Ar8035 FirmwareFastconnect 6200 Firmware+154 more
Jun 17, 2026
May 6, 2024
N/A· v4
7.0 HIGH· v3
N/A· v2
Memory corruption while loading a VM from a signed VM image that is not coherent in the processor cache.