VulnSea

wcd9385_firmware vulnerabilities

CVEs whose affected-version data names the wcd9385_firmware package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

59 CVEsRSS

CVE-2026-57559High· 7.8
3w ago

Memory corruption while processing service requests.

Memory corruption while processing service requests.

▾ Twilightqualcomm · cologne_firmwareEPSS 0.07%via NVD
CVE-2026-57555High· 7.8
3w ago

Memory Corruption when executing system service routines due to improper handling of user input buffers.

Memory Corruption when executing system service routines due to improper handling of user input buffers.

▾ Twilightqualcomm · cologne_firmwareEPSS 0.07%via NVD
CVE-2026-57537High· 7.8
3w ago

Memory Corruption when accessing and modifying geographic mapping data concurrently without proper synchronization.

Memory Corruption when accessing and modifying geographic mapping data concurrently without proper synchronization.

▾ Twilightqualcomm · congo_firmwareEPSS 0.07%via NVD
CVE-2026-25291High· 7.8
3w ago

Memory corruption when performing concurrent operations on shared memory page lists due to lack of proper synchronization mechanisms.

Memory corruption when performing concurrent operations on shared memory page lists due to lack of proper synchronization mechanisms.

▾ Twilightqualcomm · sar1165p_firmwareEPSS 0.07%via NVD
CVE-2026-25274Medium· 6.7
3w ago

Memory Corruption when processing concurrent DMA buffer allocation and deallocation commands without proper synchronization.

Memory Corruption when processing concurrent DMA buffer allocation and deallocation commands without proper synchronization.

▾ Sunlitqualcomm · aqt1000_firmwareEPSS 0.07%via NVD
CVE-2026-25270Medium· 6.7
3w ago

Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver.

Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver.

▾ Sunlitqualcomm · snapdragon_g1_gen_2_gaming_platform_firmwareEPSS 0.07%via NVD
CVE-2026-25269Medium· 6.7
3w ago

Memory corruption when processing camera requests with excessive batch and IO buffer configurations exceeds allocated memory size.

Memory corruption when processing camera requests with excessive batch and IO buffer configurations exceeds allocated memory size.

▾ Sunlitqualcomm · snapdragon_g1_gen_2_gaming_platform_firmwareEPSS 0.07%via NVD
CVE-2026-25263Medium· 6.6
3w ago

Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters.

Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters.

▾ Sunlitqualcomm · snapdragon_g1_gen_2_gaming_platform_firmwareEPSS 0.06%via NVD
CVE-2026-24073High· 7.8
1mo ago

Memory corruption when processing decode statistics due to insufficient validation of offset against structure size.

Memory corruption when processing decode statistics due to insufficient validation of offset against structure size.

▾ Twilightqualcomm · cologne_firmwareEPSS 0.10%via NVD
CVE-2026-24081High· 7.4
1mo ago

Transient DOS when processing a channel map with insufficient used channels and adaptive frequency hopping is fully enabled.

Transient DOS when processing a channel map with insufficient used channels and adaptive frequency hopping is fully enabled.

▾ Twilightqualcomm · ar8035_firmwareEPSS 0.16%via NVD
CVE-2026-24075High· 7.8
1mo ago

Memory Corruption when multiple threads issue concurrent IOCTL requests to the device control handler due to improper synchronization and race conditions.

Memory Corruption when multiple threads issue concurrent IOCTL requests to the device control handler due to improper synchronization and race conditions.

▾ Twilightqualcomm · wsa8845h_firmwareEPSS 0.09%via NVD
CVE-2026-24074High· 7.8
1mo ago

Memory Corruption when processing data with large offset and length values exceeds buffer limits during data copy operations.

Memory Corruption when processing data with large offset and length values exceeds buffer limits during data copy operations.

▾ Twilightqualcomm · iqx5121_firmwareEPSS 0.10%via NVD
CVE-2026-25261Medium· 6.7
1mo ago

Memory corruption while processing rear sensor IOCTL calls.

Memory corruption while processing rear sensor IOCTL calls.

▾ Sunlitqualcomm · cologne_firmwareEPSS 0.10%via NVD
CVE-2025-59607High· 7.8
1mo ago

Memory Corruption when copying large input data exceeds normal allocation limits.

Memory Corruption when copying large input data exceeds normal allocation limits.

▾ Twilightqualcomm · cologne_firmwareEPSS 0.10%via NVD
CVE-2026-25294High· 7.4
1mo ago

Transient DOS while parsing frame during channel usage.

Transient DOS while parsing frame during channel usage.

▾ Twilightqualcomm · cologne_firmwareEPSS 0.16%via NVD
CVE-2026-25280High· 7.8
1mo ago

Memory corruption when processing escape handling flow with insufficient user buffer sizes.

Memory corruption when processing escape handling flow with insufficient user buffer sizes.

▾ Twilightqualcomm · wsa8845h_firmwareEPSS 0.10%via NVD
CVE-2025-59617Medium· 6.6
3mo ago

Memory Corruption when processing multiple IOCTL calls with the same buffer file descriptor input.

Memory Corruption when processing multiple IOCTL calls with the same buffer file descriptor input.

▾ Sunlitqualcomm · fastconnect_6700_firmwareEPSS 0.09%via NVD
CVE-2025-59616Medium· 6.6
3mo ago

Memory Corruption when processing multiple IOCTL calls with the same buffer file descriptor input due to accessing already freed memory.

Memory Corruption when processing multiple IOCTL calls with the same buffer file descriptor input due to accessing already freed memory.

▾ Sunlitqualcomm · fastconnect_6700_firmwareEPSS 0.09%via NVD
CVE-2025-59615Medium· 6.6
3mo ago

Memory Corruption when invoking device input/output control operations for mapping and unmapping persistent memory buffers due to improper synchronization.

Memory Corruption when invoking device input/output control operations for mapping and unmapping persistent memory buffers due to improper synchronization.

▾ Sunlitqualcomm · fastconnect_6700_firmwareEPSS 0.09%via NVD
CVE-2025-47408High· 7.8
5mo ago

Memory corruption when another driver calls an IOCTL with invalid input/output buffer.

Memory corruption when another driver calls an IOCTL with invalid input/output buffer.

▾ Twilightqualcomm · fastconnect_6200_firmwareEPSS 0.07%via NVD
CVE-2025-47407High· 7.8
5mo ago

Memory corruption while creating a process on the digital signal processor due to allocation failure at the kernel level.

Memory corruption while creating a process on the digital signal processor due to allocation failure at the kernel level.

▾ Twilightqualcomm · video_collaboration_vc1_platform_firmwareEPSS 0.05%via NVD
CVE-2025-47406Medium· 6.1
5mo ago

Information Disclosure while processing IOCTL handler callbacks without verifying buffer size.

Information Disclosure while processing IOCTL handler callbacks without verifying buffer size.

▾ Sunlitqualcomm · x2000086_firmwareEPSS 0.07%via NVD
CVE-2025-47405High· 7.8
5mo ago

Memory corruption when processing camera sensor input/output control codes with invalid output buffers.

Memory corruption when processing camera sensor input/output control codes with invalid output buffers.

▾ Twilightqualcomm · fastconnect_6900_firmwareEPSS 0.07%via NVD
CVE-2025-47403Medium· 6.5
5mo ago

Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming.

Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming.

▾ Sunlitqualcomm · snapdragon_x65_5g_modem-rf_firmwareEPSS 0.22%via NVD
CVE-2025-47391High· 7.8
6mo ago

Memory corruption while processing a frame request from user.

Memory corruption while processing a frame request from user.

▾ Twilightqualcomm · wcn3988_firmwareEPSS 0.10%via NVD
CVE-2025-47390High· 7.8
6mo ago

Memory corruption while preprocessing IOCTL request in JPEG driver.

Memory corruption while preprocessing IOCTL request in JPEG driver.

▾ Twilightqualcomm · qcm5430_firmwareEPSS 0.10%via NVD
CVE-2025-47389High· 7.8
6mo ago

Memory corruption when buffer copy operation fails due to integer overflow during attestation report generation.

Memory corruption when buffer copy operation fails due to integer overflow during attestation report generation.

▾ Twilightqualcomm · ar8035_firmwareEPSS 0.10%via NVD
CVE-2025-47374Medium· 6.5
6mo ago

Memory Corruption when accessing freed memory due to concurrent fence deregistration and signal handling.

Memory Corruption when accessing freed memory due to concurrent fence deregistration and signal handling.

▾ Sunlitqualcomm · fastconnect_6900_firmwareEPSS 0.07%via NVD
CVE-2025-47339High· 7.8
9mo ago

Memory corruption while deinitializing a HDCP session.

Memory corruption while deinitializing a HDCP session.

▾ Twilightqualcomm · fastconnect_6900_firmwareEPSS 0.08%via NVD
CVE-2025-47396High· 7.8
9mo ago

Memory corruption occurs when a secure application is launched on a device with insufficient memory.

Memory corruption occurs when a secure application is launched on a device with insufficient memory.

▾ Twilightqualcomm · fastconnect_6200_firmwareEPSS 0.08%via NVD
wcd9385_firmware vulnerabilities (CVEs) · VulnSea