WF
Product
Wcd9375 Firmware
On CISA KEVExploited in the wild
280
CVEs
3
On KEV
9.8
Max CVSS
7
New 30D
Severity mix
Critical 10High 205Medium 65Low 0
Watch
Add Wcd9375 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-30276 | 7.8 | Jan 3 | Improper access control while doing XPU re-configuration dynamically can lead to unauthorized access to a secure resource in Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2021-30316 | 7.8 | Oct 20 | Possible out of bound memory access due to improper boundary check while creating HSYNC fence in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-30305 | 7.8 | Oct 20 | Possible out of bound access due to lack of validation of page offset before page is inserted in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-30257 | 7.8 | Oct 20 | Possible out of bound read or write in VR service due to lack of validation of DSP selection values in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2021-30256 | 7.8 | Oct 20 | Possible stack overflow due to improper validation of camera name length before copying the name in VR Service in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2021-1940 | 7.8 | Jul 13 | Use after free can occur due to improper handling of response from firmware in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2025-47403 | 7.5 | May 4 | Buffer Over-read in WLAN Firmware Affected: All versions, or not specified |
| CVE-2024-49847 | 7.5 | May 6 | Buffer Over-read in Multi-Mode Call Processor Affected: All versions, or not specified |
| CVE-2024-38404 | 7.5 | Feb 3 | Buffer Over-read in Multi Mode Call Processor Affected: All versions, or not specified |
| CVE-2024-38397 | 7.5 | Oct 7 | Buffer Over-read in WLAN Host Communication Affected: All versions, or not specified |
| CVE-2024-33049 | 7.5 | Oct 7 | Buffer Over-read in WLAN Host Communication Affected: All versions, or not specified |
| CVE-2024-23358 | 7.5 | Sep 2 | Buffer Over-read in Multi Mode Call Processor Affected: 0 |
| CVE-2024-33013 | 7.5 | Aug 5 | Buffer Over-read in WLAN Host Affected: All versions, or not specified |
| CVE-2024-33012 | 7.5 | Aug 5 | Buffer Over-read in WLAN Host Affected: All versions, or not specified |
| CVE-2024-33011 | 7.5 | Aug 5 | Buffer Over-read in WLAN Host Affected: All versions, or not specified |
| CVE-2024-23353 | 7.5 | Aug 5 | Buffer Over-read in Multi Mode Call Processor Affected: All versions, or not specified |
| CVE-2024-23352 | 7.5 | Aug 5 | Loop with Unreachable Exit Condition (`Infinite Loop`) in Multi Mode Call Processor Affected: All versions, or not specified |
| CVE-2023-33043 | 7.5 | Dec 5 | Reachable Assertion in Modem Affected: All versions, or not specified |
| CVE-2023-24843 | 7.5 | Oct 3 | Reachable Assertion in Modem Affected: All versions, or not specified |
| CVE-2023-28584 | 7.5 | Sep 5 | Improper Authorization in WLAN Host Affected: All versions, or not specified |
| CVE-2023-21646 | 7.5 | Sep 5 | Reachable Assertion in Modem Affected: All versions, or not specified |
| CVE-2023-28555 | 7.5 | Aug 8 | Buffer Over-read in Audio Affected: All versions, or not specified |
| CVE-2023-21669 | 7.5 | Jun 6 | Buffer Over-read in WLAN HOST Affected: 0 |
| CVE-2022-40536 | 7.5 | Jun 6 | Improper authentication in Modem Affected: All versions, or not specified |
| CVE-2022-22060 | 7.5 | Jun 6 | Reachable Assertion in Modem Affected: 0 |
| CVE-2022-40508 | 7.5 | May 2 | Reachable assertion in Modem Affected: 0 |
| CVE-2022-34144 | 7.5 | May 2 | Reachable assertion in Modem Affected: All versions, or not specified |
| CVE-2022-40535 | 7.5 | Mar 7 | Buffer Over-read in WLAN Affected: All versions, or not specified |
| CVE-2022-33272 | 7.5 | Mar 7 | Reachable assertion in Modem Affected: All versions, or not specified |
| CVE-2022-33254 | 7.5 | Mar 7 | Reachable assertion in Modem Affected: All versions, or not specified |
| CVE-2022-33250 | 7.5 | Mar 7 | Reachable assertion in Modem Affected: All versions, or not specified |
| CVE-2022-33244 | 7.5 | Mar 7 | Reachable assertion in Modem Affected: All versions, or not specified |
| CVE-2022-25672 | 7.5 | Dec 13 | Denial of service in MODEM due to reachable assertion while processing SIB1 with invalid Bandwidth in Snapdragon Mobile Affected: All versions, or not specified |
| CVE-2022-25692 | 7.5 | Dec 13 | Denial of service in Modem due to reachable assertion while processing the common config procedure in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2022-25702 | 7.5 | Dec 13 | Denial of service in modem due to reachable assertion while processing reconfiguration message in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2022-25691 | 7.5 | Dec 13 | Denial of service in Modem due to reachable assertion while processing SIB1 with invalid SCS and bandwidth settings in Snapdragon Mobile Affected: All versions, or not specified |
| CVE-2022-25662 | 7.5 | Oct 12 | Information disclosure due to untrusted pointer dereference in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-30340 | 7.5 | Jun 14 | Reachable assertion due to improper validation of coreset in PDCCH configuration in SA mode in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial… Affected: All versions, or not specified |
| CVE-2021-35096 | 7.5 | Jun 14 | Improper memory allocation during counter check DLM handling can lead to denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial… Affected: All versions, or not specified |
| CVE-2021-35087 | 7.5 | Jun 14 | Possible null pointer access due to improper validation of system information message to be processed in Snapdragon Industrial IOT, Snapdragon Mobile Affected: All versions, or not specified |
| CVE-2021-35086 | 7.5 | Jun 14 | Possible buffer over read due to improper validation of SIB type when processing a NR system Information message in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2021-35076 | 7.5 | Jun 14 | Possible null pointer dereference due to improper validation of RRC connection reconfiguration message in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-35073 | 7.5 | Jun 14 | Possible assertion due to improper validation of rank restriction field in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-30332 | 7.5 | Apr 1 | Possible assertion due to improper validation of OTA configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile Affected: All versions, or not specified |
| CVE-2021-30329 | 7.5 | Apr 1 | Possible assertion due to improper validation of TCI configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile Affected: All versions, or not specified |
| CVE-2021-30328 | 7.5 | Apr 1 | Possible assertion due to improper validation of invalid NR CSI-IM resource configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial… Affected: All versions, or not specified |
| CVE-2021-30326 | 7.5 | Feb 11 | Possible assertion due to improper size validation while processing the DownlinkPreemption IE in an RRC Reconfiguration/RRC Setup message in Snapdragon Auto, Snapdragon Compute,… Affected: All versions, or not specified |
| CVE-2021-30301 | 7.5 | Jan 13 | Possible denial of service due to out of memory while processing RRC and NAS OTA message in Snapdragon Auto, Snapdragon Industrial IOT, Snapdragon Mobile Affected: All versions, or not specified |
| CVE-2021-30287 | 7.5 | Jan 13 | Possible assertion due to improper validation of symbols configured for PDCCH monitoring in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial… Affected: All versions, or not specified |
| CVE-2021-1982 | 7.5 | Nov 12 | Possible denial of service scenario due to improper input validation of received NAS OTA message in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |