wcn3990_firmware vulnerabilities
CVEs whose affected-version data names the wcn3990_firmware package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
6 CVEsRSS
CVE-2026-25263Medium· 6.6Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters.
Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters.
CVE-2025-47404Medium· 6.5Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified.
Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified.
CVE-2025-47369Medium· 5.5Information disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a session ID.
Information disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a session ID.
CVE-2025-47331Medium· 6.1Information disclosure while processing a firmware event.
Information disclosure while processing a firmware event.
CVE-2025-27041Medium· 5.5Transient DOS while processing video packets received from video firmware.
Transient DOS while processing video packets received from video firmware.
CVE-2025-21488High· 8.2Information disclosure while decoding this RTP packet headers received by UE from the network when the padding bit is set.
Information disclosure while decoding this RTP packet headers received by UE from the network when the padding bit is set.