Qualcomm Wcn6650 Firmware vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Qualcomm Wcn6650 Firmware: 76 record(s), with affected versions and fixes.cpe:2.3:o:qualcomm:wcn6650_firmware
CVE-2026-24085
High · 7.2
CWE-121 Jun 1, 2026
Stack-based Buffer Overflow in Display
Memory Corruption when processing display command line information due to improper initialization of a variable.
CVE-2025-59610
Medium · 6.4
CWE-367 Jun 1, 2026
Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver
Memory Corruption when processing IOCTL requests with mismatched API versions due to concurrent modification of user-space buffer.
CVE-2025-59609
Medium · 5.5
CWE-126 Jun 1, 2026
Buffer Over-read in WLAN Host Communication
Information Disclosure when processing advertisement frames with malformed MBSSID elements of insufficient length.
CVE-2025-59605
High · 7.8
CWE-787 Jun 1, 2026
Out-of-bounds Write in HLOS
Memory Corruption when processing device identifier strings that exceed the expected maximum length.
CVE-2025-59604
High · 7.8
CWE-476 Jun 1, 2026
NULL Pointer Dereference in SPS Applications
Memory Corruption when running a memory copy operation due to invalid writes caused by a null pointer.
CVE-2026-24082
High · 7.8
CWE-416 May 4, 2026
Use After Free in Automotive GPU
Memory Corruption when copying data from a freed source while executing performance counter deselect operation.
CVE-2025-47404
High · 7.8
CWE-787 May 4, 2026
Buffer Copy Without Checking Size of Input in Automotive Audio
Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified.
CVE-2025-47403
High · 7.5
CWE-125 May 4, 2026
Buffer Over-read in WLAN Firmware
Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming.
CVE-2025-47401
High · 7.5
CWE-125 May 4, 2026
Buffer Over-read in WLAN HAL
Transient DOS when processing target power rate tables during channel configuration.
CVE-2026-21381
High · 7.5
CWE-126 Apr 6, 2026
Buffer Over-read in WLAN Firmware
Transient DOS when receiving a service data frame with excessive length during device matching over a neighborhood awareness network protocol connection.
CVE-2026-21367
High · 7.5
CWE-126 Apr 6, 2026
Buffer Over-read in WLAN Firmware
Transient DOS when processing nonstandard FILS Discovery Frames with out-of-range action sizes during initial scans.
CVE-2025-47392
High · 8.8
CWE-190 Apr 6, 2026
Integer Overflow or Wraparound in GPS
Memory corruption when decoding corrupted satellite data files with invalid signature offsets.
CVE-2025-47391
High · 7.8
CWE-121 Apr 6, 2026
Stack-based Buffer Overflow in Camera Driver
Memory corruption while processing a frame request from user.
CVE-2025-47389
High · 7.8
CWE-120 Apr 6, 2026
Buffer Copy Without Checking Size of Input in Automotive Platform
Memory corruption when buffer copy operation fails due to integer overflow during attestation report generation.
CVE-2026-21385
High · 7.8
KEV High · 58 Public exploit CWE-190 Mar 2, 2026
Qualcomm Multiple Chipsets Memory Corruption Vulnerability
Memory corruption while using alignments for memory allocation.
CVE-2025-59600
High · 7.8
CWE-126 Mar 2, 2026
Buffer Over-read in Graphics
Memory Corruption when adding user-supplied data without checking available buffer space.
CVE-2025-47386
High · 7.8
CWE-416 Mar 2, 2026
Use After Free in Automotive Audio
Memory Corruption while invoking IOCTL calls when concurrent access to shared buffer occurs.
CVE-2025-47383
High · 7.2
CWE-325 Mar 2, 2026
Missing Cryptographic Step in Data Modem
Weak configuration may lead to cryptographic issue when a VoWiFi call is triggered from UE.
CVE-2025-47379
High · 7.8
CWE-416 Mar 2, 2026
Use After Free in Automotive Audio
Memory Corruption when concurrent access to shared buffer occurs due to improper synchronization between assignment and deallocation of buffer resources.
CVE-2025-47377
High · 7.8
CWE-416 Mar 2, 2026
Use After Free in Automotive Audio
Memory Corruption when accessing a buffer after it has been freed while processing IOCTL calls.
CVE-2025-47376
High · 7.8
CWE-416 Mar 2, 2026
Use After Free in Automotive Audio
Memory Corruption when concurrent access to shared buffer occurs during IOCTL calls.
CVE-2025-47375
High · 7.8
CWE-416 Mar 2, 2026
Use After Free in Automotive Audio
Memory corruption while handling different IOCTL calls from the user-space simultaneously.
CVE-2025-47373
High · 7.8
CWE-787 Mar 2, 2026
Out-of-bounds Write in Automotive
Memory Corruption when accessing buffers with invalid length during TA invocation.
CVE-2025-47371
Medium · 6.5
CWE-617 Mar 2, 2026
Reachable Assertion in Modem
Transient DOS when an LTE RLC packet with invalid TB is received by UE.
CVE-2025-47398
High · 7.8
CWE-416 Feb 2, 2026
Use After Free in Graphics
Memory Corruption while deallocating graphics processing unit memory buffers due to improper handling of memory pointers.