Qualcomm Wcd9390 Firmware vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Qualcomm Wcd9390 Firmware: 82 record(s), with affected versions and fixes.cpe:2.3:o:qualcomm:wcd9390_firmware
CVE-2025-47373
High · 7.8
CWE-787 Mar 2, 2026
Out-of-bounds Write in Automotive
Memory Corruption when accessing buffers with invalid length during TA invocation.
CVE-2025-47371
Medium · 6.5
CWE-617 Mar 2, 2026
Reachable Assertion in Modem
Transient DOS when an LTE RLC packet with invalid TB is received by UE.
CVE-2025-47402
Medium · 6.5
CWE-125 Feb 2, 2026
Buffer Over-read in WLAN Firmware
Transient DOS when processing a received frame with an excessively large authentication information element.
CVE-2025-47398
High · 7.8
CWE-416 Feb 2, 2026
Use After Free in Graphics
Memory Corruption while deallocating graphics processing unit memory buffers due to improper handling of memory pointers.
CVE-2025-47397
High · 7.8
CWE-401 Feb 2, 2026
Improper Release of Memory Before Removing Last Reference in Graphics
Memory Corruption when initiating GPU memory mapping using scatter-gather lists due to unchecked IOMMU mapping errors.
CVE-2025-47366
High · 7.8
CWE-749 Feb 2, 2026
Exposed Dangerous Method or Function in HLOS
Cryptographic issue when a Trusted Zone with outdated code is triggered by a HLOS providing incorrect input.
CVE-2025-47369
Medium · 5.5
CWE-200 Jan 7, 2026
Information Exposure in Computer Vision
Information disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a session ID.
CVE-2025-47348
High · 7.8
CWE-457 Jan 7, 2026
Use of Uninitialized Variable in HLOS
Memory corruption while processing identity credential operations in the trusted application.
CVE-2025-47346
High · 7.8
CWE-787 Jan 7, 2026
Out-of-bounds Write in HLOS
Memory corruption while processing a secure logging command in the trusted application.
CVE-2025-47345
High · 8.4
CWE-323 Jan 7, 2026
Reusing a Nonce, Key Pair in Encryption in Automotive Platform
Cryptographic issue may occur while encrypting license data.
CVE-2025-47344
Medium · 6.4
CWE-367 Jan 7, 2026
Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver
Memory corruption while handling sensor utility operations.
CVE-2025-47339
High · 7.8
CWE-416 Jan 7, 2026
Use After Free in HLOS
Memory corruption while deinitializing a HDCP session.
CVE-2025-47337
Medium · 6.7
CWE-416 Jan 7, 2026
Use After Free in Camera Driver
Memory corruption while accessing a synchronization object during concurrent operations.
CVE-2025-47335
Medium · 6.7
CWE-120 Jan 7, 2026
Buffer Copy Without Checking Size of Input in Camera Driver
Memory corruption while parsing clock configuration data for a specific hardware type.
CVE-2025-47334
Medium · 6.7
CWE-120 Jan 7, 2026
Buffer Copy Without Checking Size of Input in Camera Driver
Memory corruption while processing shared command buffer packet between camera userspace and kernel.
CVE-2025-47333
Medium · 6.6
CWE-416 Jan 7, 2026
Use After Free in HLOS
Memory corruption while handling buffer mapping operations in the cryptographic driver.
CVE-2025-47332
Medium · 6.4
CWE-367 Jan 7, 2026
Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver
Memory corruption while processing a config call from userspace.
CVE-2025-47331
Medium · 6.1
CWE-126 Jan 7, 2026
Buffer Over-read in Video
Information disclosure while processing a firmware event.
CVE-2025-47330
Medium · 5.5
CWE-126 Jan 7, 2026
Buffer Over-read in Video
Transient DOS while parsing video packets received from the video firmware.
CVE-2025-47382
High · 7.8
CWE-863 Dec 18, 2025
Incorrect Authorization in Boot
Memory corruption while loading an invalid firmware in boot loader.
CVE-2025-47323
High · 7.8
CWE-190 Dec 18, 2025
Integer Overflow or Wraparound in Audio
Memory corruption while routing GPR packets between user and root when handling large data packet.
CVE-2025-47322
High · 7.8
CWE-416 Dec 18, 2025
Use After Free in Automotive Linux OS
Memory corruption while handling IOCTL calls to set mode.
CVE-2025-47320
High · 7.8
CWE-787 Dec 18, 2025
Out-of-bounds Write in Audio
Memory corruption while processing MFC channel configuration during music playback.
CVE-2025-47319
Medium · 6.7
CWE-497 Dec 18, 2025
Exposure of Sensitive System Information to an Unauthorized Control Sphere in HLOS
Information disclosure while exposing internal TA-to-TA communication APIs to HLOS
CVE-2025-47370
Medium · 6.5
CWE-617 Nov 4, 2025
Reachable Assertion in BT Controller
Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan.