VulnSea

wcn3950_firmware vulnerabilities

CVEs whose affected-version data names the wcn3950_firmware package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

30 CVEsRSS

CVE-2026-57537High· 7.8
3w ago

Memory Corruption when accessing and modifying geographic mapping data concurrently without proper synchronization.

Memory Corruption when accessing and modifying geographic mapping data concurrently without proper synchronization.

▾ Twilightqualcomm · congo_firmwareEPSS 0.07%via NVD
CVE-2026-25291High· 7.8
3w ago

Memory corruption when performing concurrent operations on shared memory page lists due to lack of proper synchronization mechanisms.

Memory corruption when performing concurrent operations on shared memory page lists due to lack of proper synchronization mechanisms.

▾ Twilightqualcomm · sar1165p_firmwareEPSS 0.07%via NVD
CVE-2026-25273Medium· 6.7
3w ago

Memory Corruption when processing camera operations due to out-of-bounds write during driver updates.

Memory Corruption when processing camera operations due to out-of-bounds write during driver updates.

▾ Sunlitqualcomm · congo_firmwareEPSS 0.07%via NVD
CVE-2026-25270Medium· 6.7
3w ago

Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver.

Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver.

▾ Sunlitqualcomm · snapdragon_g1_gen_2_gaming_platform_firmwareEPSS 0.07%via NVD
CVE-2026-25269Medium· 6.7
3w ago

Memory corruption when processing camera requests with excessive batch and IO buffer configurations exceeds allocated memory size.

Memory corruption when processing camera requests with excessive batch and IO buffer configurations exceeds allocated memory size.

▾ Sunlitqualcomm · snapdragon_g1_gen_2_gaming_platform_firmwareEPSS 0.07%via NVD
CVE-2026-25263Medium· 6.6
3w ago

Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters.

Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters.

▾ Sunlitqualcomm · snapdragon_g1_gen_2_gaming_platform_firmwareEPSS 0.06%via NVD
CVE-2025-59617Medium· 6.6
3mo ago

Memory Corruption when processing multiple IOCTL calls with the same buffer file descriptor input.

Memory Corruption when processing multiple IOCTL calls with the same buffer file descriptor input.

▾ Sunlitqualcomm · fastconnect_6700_firmwareEPSS 0.09%via NVD
CVE-2025-59616Medium· 6.6
3mo ago

Memory Corruption when processing multiple IOCTL calls with the same buffer file descriptor input due to accessing already freed memory.

Memory Corruption when processing multiple IOCTL calls with the same buffer file descriptor input due to accessing already freed memory.

▾ Sunlitqualcomm · fastconnect_6700_firmwareEPSS 0.09%via NVD
CVE-2025-59615Medium· 6.6
3mo ago

Memory Corruption when invoking device input/output control operations for mapping and unmapping persistent memory buffers due to improper synchronization.

Memory Corruption when invoking device input/output control operations for mapping and unmapping persistent memory buffers due to improper synchronization.

▾ Sunlitqualcomm · fastconnect_6700_firmwareEPSS 0.09%via NVD
CVE-2025-47407High· 7.8
5mo ago

Memory corruption while creating a process on the digital signal processor due to allocation failure at the kernel level.

Memory corruption while creating a process on the digital signal processor due to allocation failure at the kernel level.

▾ Twilightqualcomm · video_collaboration_vc1_platform_firmwareEPSS 0.05%via NVD
CVE-2025-47404Medium· 6.5
5mo ago

Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified.

Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified.

▾ Sunlitqualcomm · qca8695au_firmwareEPSS 0.07%via NVD
CVE-2025-47403Medium· 6.5
5mo ago

Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming.

Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming.

▾ Sunlitqualcomm · snapdragon_x65_5g_modem-rf_firmwareEPSS 0.22%via NVD
CVE-2025-47389High· 7.8
6mo ago

Memory corruption when buffer copy operation fails due to integer overflow during attestation report generation.

Memory corruption when buffer copy operation fails due to integer overflow during attestation report generation.

▾ Twilightqualcomm · ar8035_firmwareEPSS 0.10%via NVD
CVE-2025-47339High· 7.8
9mo ago

Memory corruption while deinitializing a HDCP session.

Memory corruption while deinitializing a HDCP session.

▾ Twilightqualcomm · fastconnect_6900_firmwareEPSS 0.08%via NVD
CVE-2025-47396High· 7.8
9mo ago

Memory corruption occurs when a secure application is launched on a device with insufficient memory.

Memory corruption occurs when a secure application is launched on a device with insufficient memory.

▾ Twilightqualcomm · fastconnect_6200_firmwareEPSS 0.08%via NVD
CVE-2025-47394High· 7.8
9mo ago

Memory corruption when copying overlapping buffers during memory operations due to incorrect offset calculations.

Memory corruption when copying overlapping buffers during memory operations due to incorrect offset calculations.

▾ Twilightqualcomm · fastconnect_6200_firmwareEPSS 0.08%via NVD
CVE-2025-47388High· 7.8
9mo ago

Memory corruption while passing pages to DSP with an unaligned starting address.

Memory corruption while passing pages to DSP with an unaligned starting address.

▾ Twilightqualcomm · fastconnect_6200_firmwareEPSS 0.08%via NVD
CVE-2025-47369Medium· 5.5
9mo ago

Information disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a session ID.

Information disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a session ID.

▾ Sunlitqualcomm · ar8035_firmwareEPSS 0.08%via NVD
CVE-2025-47348High· 7.8
9mo ago

Memory corruption while processing identity credential operations in the trusted application.

Memory corruption while processing identity credential operations in the trusted application.

▾ Twilightqualcomm · aqt1000_firmwareEPSS 0.08%via NVD
CVE-2025-47346High· 7.8
9mo ago

Memory corruption while processing a secure logging command in the trusted application.

Memory corruption while processing a secure logging command in the trusted application.

▾ Twilightqualcomm · sa8145p_firmwareEPSS 0.08%via NVD
CVE-2025-47345High· 8.4
9mo ago

Cryptographic issue may occur while encrypting license data.

Cryptographic issue may occur while encrypting license data.

▾ Twilightqualcomm · wcd9385_firmwareEPSS 0.08%via NVD
CVE-2025-47344Medium· 6.7
9mo ago

Memory corruption while handling sensor utility operations.

Memory corruption while handling sensor utility operations.

▾ Sunlitqualcomm · sa6155p_firmwareEPSS 0.06%via NVD
CVE-2025-47332Medium· 6.7
9mo ago

Memory corruption while processing a config call from userspace.

Memory corruption while processing a config call from userspace.

▾ Sunlitqualcomm · fastconnect_6200_firmwareEPSS 0.06%via NVD
CVE-2025-47331Medium· 6.1
9mo ago

Information disclosure while processing a firmware event.

Information disclosure while processing a firmware event.

▾ Sunlitqualcomm · ar8031_firmwareEPSS 0.08%via NVD
CVE-2025-47330Medium· 5.5
9mo ago

Transient DOS while parsing video packets received from the video firmware.

Transient DOS while parsing video packets received from the video firmware.

▾ Sunlitqualcomm · qca6678aq_firmwareEPSS 0.07%via NVD
CVE-2025-47354High· 7.8
1y ago

Memory corruption while allocating buffers in DSP service.

Memory corruption while allocating buffers in DSP service.

▾ Twilightqualcomm · fastconnect_6200_firmwareEPSS 0.09%via NVD
CVE-2025-47351High· 7.8
1y ago

Memory corruption while processing user buffers.

Memory corruption while processing user buffers.

▾ Twilightqualcomm · fastconnect_6200_firmwareEPSS 0.09%via NVD
CVE-2025-27041Medium· 5.5
1y ago

Transient DOS while processing video packets received from video firmware.

Transient DOS while processing video packets received from video firmware.

▾ Sunlitqualcomm · ar8035_firmwareEPSS 0.08%via NVD
CVE-2025-27030Medium· 6.1
1y ago

information disclosure while invoking calibration data from user space to update firmware size.

information disclosure while invoking calibration data from user space to update firmware size.

▾ Sunlitqualcomm · c-v2x_9150_firmwareEPSS 0.09%via NVD
CVE-2025-21488High· 8.2
1y ago

Information disclosure while decoding this RTP packet headers received by UE from the network when the padding bit is set.

Information disclosure while decoding this RTP packet headers received by UE from the network when the padding bit is set.

▾ Twilightqualcomm · fastconnect_6200_firmwareEPSS 0.27%via NVD
wcn3950_firmware vulnerabilities (CVEs) · VulnSea