Qualcomm Wcn3990 Firmware vulnerabilities

CVE-2026-25267 High · 7.8 CWE-862 Oct 6, 2026

Missing Authorization in Core

Memory corruption when non-secure loader rewrites page tables before secure memory initialization.

CVE-2026-25263 Medium · 6.6 CWE-787 Oct 6, 2026

Out of Bounds write in Linux Camera

Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters.

CVE-2026-25275 High · 7.5 CWE-126 Sep 17, 2026

Buffer Over-read in WLAN Firmware

Transient DOS when processing authentication frames with invalid FILS information element header lengths.

CVE-2026-24091 High · 7.2 CWE-1286 Jun 1, 2026

Improper Validation of Syntactic Correctness of Input in Display

Memory corruption while processing fastboot commands with improperly formatted input.

CVE-2026-24085 High · 7.2 CWE-121 Jun 1, 2026

Stack-based Buffer Overflow in Display

Memory Corruption when processing display command line information due to improper initialization of a variable.

CVE-2025-59610 Medium · 6.4 CWE-367 Jun 1, 2026

Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver

Memory Corruption when processing IOCTL requests with mismatched API versions due to concurrent modification of user-space buffer.

CVE-2025-47404 High · 7.8 CWE-787 May 4, 2026

Buffer Copy Without Checking Size of Input in Automotive Audio

Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified.

CVE-2026-21385 High · 7.8 KEV High · 57 Public exploit CWE-190 Mar 2, 2026

Qualcomm Multiple Chipsets Memory Corruption Vulnerability

Memory corruption while using alignments for memory allocation.

CVE-2025-47386 High · 7.8 CWE-416 Mar 2, 2026

Use After Free in Automotive Audio

Memory Corruption while invoking IOCTL calls when concurrent access to shared buffer occurs.

CVE-2025-47383 High · 7.2 CWE-325 Mar 2, 2026

Missing Cryptographic Step in Data Modem

Weak configuration may lead to cryptographic issue when a VoWiFi call is triggered from UE.

CVE-2025-47379 High · 7.8 CWE-416 Mar 2, 2026

Use After Free in Automotive Audio

Memory Corruption when concurrent access to shared buffer occurs due to improper synchronization between assignment and deallocation of buffer resources.

CVE-2025-47376 High · 7.8 CWE-416 Mar 2, 2026

Use After Free in Automotive Audio

Memory Corruption when concurrent access to shared buffer occurs during IOCTL calls.

CVE-2025-47375 High · 7.8 CWE-416 Mar 2, 2026

Use After Free in Automotive Audio

Memory corruption while handling different IOCTL calls from the user-space simultaneously.

CVE-2025-47398 High · 7.8 CWE-416 Feb 2, 2026

Use After Free in Graphics

Memory Corruption while deallocating graphics processing unit memory buffers due to improper handling of memory pointers.

CVE-2025-47369 Medium · 5.5 CWE-200 Jan 7, 2026

Information Exposure in Computer Vision

Information disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a session ID.

CVE-2025-47333 Medium · 6.6 CWE-416 Jan 7, 2026

Use After Free in HLOS

Memory corruption while handling buffer mapping operations in the cryptographic driver.

CVE-2025-47331 Medium · 6.1 CWE-126 Jan 7, 2026

Buffer Over-read in Video

Information disclosure while processing a firmware event.

CVE-2025-47330 Medium · 5.5 CWE-126 Jan 7, 2026

Buffer Over-read in Video

Transient DOS while parsing video packets received from the video firmware.

CVE-2025-47320 High · 7.8 CWE-787 Dec 18, 2025

Out-of-bounds Write in Audio

Memory corruption while processing MFC channel configuration during music playback.

CVE-2025-27063 High · 7.8 CWE-416 Dec 18, 2025

Use After Free in Video

Memory corruption during video playback when video session open fails with time out error.

CVE-2025-27054 High · 7.8 CWE-787 Oct 9, 2025

Out-of-bounds Write in Display

Memory corruption while processing a malformed license file during reboot.

CVE-2025-27041 Medium · 5.5 CWE-126 Oct 9, 2025

Buffer Over-read in Video

Transient DOS while processing video packets received from video firmware.

CVE-2024-43047 High · 7.8 KEV High · 49 CWE-416 Oct 7, 2024

Qualcomm Multiple Chipsets Use-After-Free Vulnerability

Memory corruption while maintaining memory maps of HLOS memory.

CVE-2023-33106 High · 7.8 KEV High · 49 CWE-119 Dec 5, 2023

Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability

Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.

CVE-2023-33107 High · 7.8 KEV High · 55 Public exploit CWE-190 Dec 5, 2023

Qualcomm Multiple Chipsets Integer Overflow Vulnerability

Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.