wcd9370_firmware vulnerabilities
CVEs whose affected-version data names the wcd9370_firmware package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
46 CVEsRSS
CVE-2026-57559High· 7.8Memory corruption while processing service requests.
Memory corruption while processing service requests.
CVE-2026-57555High· 7.8Memory Corruption when executing system service routines due to improper handling of user input buffers.
Memory Corruption when executing system service routines due to improper handling of user input buffers.
CVE-2026-57537High· 7.8Memory Corruption when accessing and modifying geographic mapping data concurrently without proper synchronization.
Memory Corruption when accessing and modifying geographic mapping data concurrently without proper synchronization.
CVE-2026-25291High· 7.8Memory corruption when performing concurrent operations on shared memory page lists due to lack of proper synchronization mechanisms.
Memory corruption when performing concurrent operations on shared memory page lists due to lack of proper synchronization mechanisms.
CVE-2026-25274Medium· 6.7Memory Corruption when processing concurrent DMA buffer allocation and deallocation commands without proper synchronization.
Memory Corruption when processing concurrent DMA buffer allocation and deallocation commands without proper synchronization.
CVE-2026-25273Medium· 6.7Memory Corruption when processing camera operations due to out-of-bounds write during driver updates.
Memory Corruption when processing camera operations due to out-of-bounds write during driver updates.
CVE-2026-25272Medium· 6.7Memory Corruption when processing camera CRE driver operations with improper handling of buffer limits during hardware update preparation.
Memory Corruption when processing camera CRE driver operations with improper handling of buffer limits during hardware update preparation.
CVE-2026-25270Medium· 6.7Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver.
Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver.
CVE-2026-25263Medium· 6.6Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters.
Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters.
CVE-2026-24075High· 7.8Memory Corruption when multiple threads issue concurrent IOCTL requests to the device control handler due to improper synchronization and race conditions.
Memory Corruption when multiple threads issue concurrent IOCTL requests to the device control handler due to improper synchronization and race conditions.
CVE-2026-24074High· 7.8Memory Corruption when processing data with large offset and length values exceeds buffer limits during data copy operations.
Memory Corruption when processing data with large offset and length values exceeds buffer limits during data copy operations.
CVE-2026-25261Medium· 6.7Memory corruption while processing rear sensor IOCTL calls.
Memory corruption while processing rear sensor IOCTL calls.
CVE-2026-25294High· 7.4Transient DOS while parsing frame during channel usage.
Transient DOS while parsing frame during channel usage.
CVE-2026-25280High· 7.8Memory corruption when processing escape handling flow with insufficient user buffer sizes.
Memory corruption when processing escape handling flow with insufficient user buffer sizes.
CVE-2025-59617Medium· 6.6Memory Corruption when processing multiple IOCTL calls with the same buffer file descriptor input.
Memory Corruption when processing multiple IOCTL calls with the same buffer file descriptor input.
CVE-2025-59616Medium· 6.6Memory Corruption when processing multiple IOCTL calls with the same buffer file descriptor input due to accessing already freed memory.
Memory Corruption when processing multiple IOCTL calls with the same buffer file descriptor input due to accessing already freed memory.
CVE-2025-59615Medium· 6.6Memory Corruption when invoking device input/output control operations for mapping and unmapping persistent memory buffers due to improper synchronization.
Memory Corruption when invoking device input/output control operations for mapping and unmapping persistent memory buffers due to improper synchronization.
CVE-2025-47407High· 7.8Memory corruption while creating a process on the digital signal processor due to allocation failure at the kernel level.
Memory corruption while creating a process on the digital signal processor due to allocation failure at the kernel level.
CVE-2025-47406Medium· 6.1Information Disclosure while processing IOCTL handler callbacks without verifying buffer size.
Information Disclosure while processing IOCTL handler callbacks without verifying buffer size.
CVE-2025-47403Medium· 6.5Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming.
Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming.
CVE-2025-47401Medium· 6.5Transient DOS when processing target power rate tables during channel configuration.
Transient DOS when processing target power rate tables during channel configuration.
CVE-2025-47391High· 7.8Memory corruption while processing a frame request from user.
Memory corruption while processing a frame request from user.
CVE-2025-47390High· 7.8Memory corruption while preprocessing IOCTL request in JPEG driver.
Memory corruption while preprocessing IOCTL request in JPEG driver.
CVE-2025-47389High· 7.8Memory corruption when buffer copy operation fails due to integer overflow during attestation report generation.
Memory corruption when buffer copy operation fails due to integer overflow during attestation report generation.
CVE-2025-47396High· 7.8Memory corruption occurs when a secure application is launched on a device with insufficient memory.
Memory corruption occurs when a secure application is launched on a device with insufficient memory.
CVE-2025-47394High· 7.8Memory corruption when copying overlapping buffers during memory operations due to incorrect offset calculations.
Memory corruption when copying overlapping buffers during memory operations due to incorrect offset calculations.
CVE-2025-47388High· 7.8Memory corruption while passing pages to DSP with an unaligned starting address.
Memory corruption while passing pages to DSP with an unaligned starting address.
CVE-2025-47369Medium· 5.5Information disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a session ID.
Information disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a session ID.
CVE-2025-47348High· 7.8Memory corruption while processing identity credential operations in the trusted application.
Memory corruption while processing identity credential operations in the trusted application.
CVE-2025-47346High· 7.8Memory corruption while processing a secure logging command in the trusted application.
Memory corruption while processing a secure logging command in the trusted application.