wcn3980_firmware vulnerabilities
CVEs whose affected-version data names the wcn3980_firmware package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
17 CVEsRSS
CVE-2026-25291High· 7.8Memory corruption when performing concurrent operations on shared memory page lists due to lack of proper synchronization mechanisms.
Memory corruption when performing concurrent operations on shared memory page lists due to lack of proper synchronization mechanisms.
CVE-2026-25270Medium· 6.7Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver.
Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver.
CVE-2026-25263Medium· 6.6Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters.
Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters.
CVE-2025-47407High· 7.8Memory corruption while creating a process on the digital signal processor due to allocation failure at the kernel level.
Memory corruption while creating a process on the digital signal processor due to allocation failure at the kernel level.
CVE-2025-47404Medium· 6.5Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified.
Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified.
CVE-2025-47389High· 7.8Memory corruption when buffer copy operation fails due to integer overflow during attestation report generation.
Memory corruption when buffer copy operation fails due to integer overflow during attestation report generation.
CVE-2025-47396High· 7.8Memory corruption occurs when a secure application is launched on a device with insufficient memory.
Memory corruption occurs when a secure application is launched on a device with insufficient memory.
CVE-2025-47394High· 7.8Memory corruption when copying overlapping buffers during memory operations due to incorrect offset calculations.
Memory corruption when copying overlapping buffers during memory operations due to incorrect offset calculations.
CVE-2025-47388High· 7.8Memory corruption while passing pages to DSP with an unaligned starting address.
Memory corruption while passing pages to DSP with an unaligned starting address.
CVE-2025-47369Medium· 5.5Information disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a session ID.
Information disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a session ID.
CVE-2025-47348High· 7.8Memory corruption while processing identity credential operations in the trusted application.
Memory corruption while processing identity credential operations in the trusted application.
CVE-2025-47331Medium· 6.1Information disclosure while processing a firmware event.
Information disclosure while processing a firmware event.
CVE-2025-47330Medium· 5.5Transient DOS while parsing video packets received from the video firmware.
Transient DOS while parsing video packets received from the video firmware.
CVE-2025-47355High· 7.8Memory corruption while invoking remote procedure IOCTL calls.
Memory corruption while invoking remote procedure IOCTL calls.
CVE-2025-27041Medium· 5.5Transient DOS while processing video packets received from video firmware.
Transient DOS while processing video packets received from video firmware.
CVE-2025-27030Medium· 6.1information disclosure while invoking calibration data from user space to update firmware size.
information disclosure while invoking calibration data from user space to update firmware size.
CVE-2025-21488High· 8.2Information disclosure while decoding this RTP packet headers received by UE from the network when the padding bit is set.
Information disclosure while decoding this RTP packet headers received by UE from the network when the padding bit is set.