← Back

Wcn3991 Firmware

wcn3991_firmware

Vendor: Qualcomm • 472 CVEs

CVEs (472)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Qualcomm
270315 5g Iot Modem Firmware
Aqt1000 FirmwareAr8035 Firmware+267 more
Jun 17, 2026
Jun 6, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Transient DOS in WLAN Firmware while processing frames with missing header fields.
1Qualcomm
126Csra6620 Firmware
Csra6640 FirmwareFlight Rb5 5g Platform Firmware+123 more
Jun 17, 2026
Jun 6, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Memoru corruption in Audio when ADSP sends input during record use case.
1Qualcomm
128Ar8035 Firmware
Csra6620 FirmwareCsra6640 Firmware+125 more
Jun 17, 2026
Jun 6, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption in WLAN HOST while receiving an WMI event from firmware.
1Qualcomm
283Apq8017 Firmware
Apq8064au FirmwareApq8076 Firmware+280 more
Jun 17, 2026
Jun 6, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption in WLAN HAL while processing WMI-UTF command or FTM TLV1 command.
1Qualcomm
81315 5g Iot Modem Firmware
Ar8035 FirmwareQca6390 Firmware+78 more
Jun 17, 2026
Jun 6, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Transient DOS due to improper authentication in modem while receiving plain TLB OTA request message from network.
1Qualcomm
110Csra6620 Firmware
Csra6640 FirmwareFlight Rb5 5g Platform Firmware+107 more
Jun 17, 2026
Jun 6, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Transient DOS due to untrusted Pointer Dereference in core while sending USB QMI request.
1Qualcomm
196Aqt1000 Firmware
Ar8031 FirmwareAr8035 Firmware+193 more
Jun 17, 2026
Jun 6, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption due to improper access control in kernel while processing a mapping request from root process.
1Qualcomm
1859205 Lte Modem Firmware
Aqt1000 FirmwareAr8031 Firmware+182 more
Jun 17, 2026
Jun 6, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Information disclosure in Kernel due to indirect branch misprediction.
1Qualcomm
54Csr8811 Firmware
Ipq6000 FirmwareIpq6005 Firmware+51 more
Jun 17, 2026
Jun 6, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption in Linux Networking due to double free while handling a hyp-assign.
1Qualcomm
242315 5g Iot Modem Firmware
8953pro Firmware9205 Lte Modem Firmware+239 more
Jun 17, 2026
Jun 6, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Transient DOS due to improper authorization in Modem
1Qualcomm
242315 5g Iot Modem Firmware
9205 Lte Modem Firmware9206 Lte Modem Firmware+239 more
Jun 17, 2026
Jun 6, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption due to double free in Core while mapping HLOS address to the list.
1Qualcomm
110Aqt1000 Firmware
Qam8255p FirmwareQam8295p Firmware+107 more
Jun 17, 2026
Jun 6, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory Corruption due to double free in automotive when a bad HLOS address for one of the lists to be mapped is passed.
1Qualcomm
53Aqt1000 Firmware
Qca6390 FirmwareQca6391 Firmware+50 more
Jun 17, 2026
Jun 6, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption in Linux while sending DRM request.
1Qualcomm
242315 5g Iot Modem Firmware
8953pro Firmware9207 Lte Modem Firmware+239 more
Jun 17, 2026
Jun 6, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption in modem due to stack based buffer overflow while parsing OTASP Key Generation Request Message.
1Qualcomm
49Aqt1000 Firmware
Qam8255p FirmwareQca6420 Firmware+46 more
Jun 17, 2026
Jun 6, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption due to use after free in Core when multiple DCI clients register and deregister.
1Qualcomm
74315 5g Iot Modem Firmware
Ar8035 FirmwareQca6390 Firmware+71 more
Jun 17, 2026
Jun 6, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Transient DOS due to reachable assertion in Modem because of invalid network configuration.
1Qualcomm
44Aqt1000 Firmware
Qca6420 FirmwareQca6430 Firmware+41 more
Jun 17, 2026
Jun 6, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption in FM Host due to buffer copy without checking the size of input in FM Host
1Qualcomm
71Aqt1000 Firmware
Csrb31024 FirmwareQam8255p Firmware+68 more
Jun 17, 2026
Jun 6, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption in Linux android due to double free while calling unregister provider after register call.
1Qualcomm
33Aqt1000 Firmware
Qam8255p FirmwareQca6420 Firmware+30 more
Jun 17, 2026
Jun 6, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption due to buffer copy without checking the size of input in Core while processing ioctl commands from diag client applications.
1Qualcomm
46Aqt1000 Firmware
Qam8255p FirmwareQca6420 Firmware+43 more
Jun 17, 2026
Jun 6, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption in core due to buffer copy without check9ing the size of input while processing ioctl queries.