WF
Product
Wcd9385 Firmware
On CISA KEVExploited in the wild
411
CVEs
3
On KEV
9.8
Max CVSS
5
New 30D
Severity mix
Critical 17High 321Medium 73Low 0
Watch
Add Wcd9385 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-25662 | 7.5 | Oct 12 | Information disclosure due to untrusted pointer dereference in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-35096 | 7.5 | Jun 14 | Improper memory allocation during counter check DLM handling can lead to denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial… Affected: All versions, or not specified |
| CVE-2021-35087 | 7.5 | Jun 14 | Possible null pointer access due to improper validation of system information message to be processed in Snapdragon Industrial IOT, Snapdragon Mobile Affected: All versions, or not specified |
| CVE-2021-35086 | 7.5 | Jun 14 | Possible buffer over read due to improper validation of SIB type when processing a NR system Information message in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2021-35076 | 7.5 | Jun 14 | Possible null pointer dereference due to improper validation of RRC connection reconfiguration message in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-35073 | 7.5 | Jun 14 | Possible assertion due to improper validation of rank restriction field in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-30340 | 7.5 | Jun 14 | Reachable assertion due to improper validation of coreset in PDCCH configuration in SA mode in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial… Affected: All versions, or not specified |
| CVE-2021-30332 | 7.5 | Apr 1 | Possible assertion due to improper validation of OTA configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile Affected: All versions, or not specified |
| CVE-2021-30329 | 7.5 | Apr 1 | Possible assertion due to improper validation of TCI configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile Affected: All versions, or not specified |
| CVE-2021-30328 | 7.5 | Apr 1 | Possible assertion due to improper validation of invalid NR CSI-IM resource configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial… Affected: All versions, or not specified |
| CVE-2021-30326 | 7.5 | Feb 11 | Possible assertion due to improper size validation while processing the DownlinkPreemption IE in an RRC Reconfiguration/RRC Setup message in Snapdragon Auto, Snapdragon Compute,… Affected: All versions, or not specified |
| CVE-2021-30301 | 7.5 | Jan 13 | Possible denial of service due to out of memory while processing RRC and NAS OTA message in Snapdragon Auto, Snapdragon Industrial IOT, Snapdragon Mobile Affected: All versions, or not specified |
| CVE-2021-30287 | 7.5 | Jan 13 | Possible assertion due to improper validation of symbols configured for PDCCH monitoring in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial… Affected: All versions, or not specified |
| CVE-2021-1982 | 7.5 | Nov 12 | Possible denial of service scenario due to improper input validation of received NAS OTA message in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2026-25294 | 7.4 | Sep 17 | Buffer Over-read in WLAN Firmware Affected: All versions, or not specified |
| CVE-2026-24081 | 7.4 | Sep 17 | Buffer Over-read in BT Controller Affected: All versions, or not specified |
| CVE-2026-25288 | 7.4 | Aug 4 | Buffer Over-read in WLAN Firmware Affected: All versions, or not specified |
| CVE-2025-59617 | 7.3 | Jul 6 | Use After Free in Computer Vision Affected: All versions, or not specified |
| CVE-2026-21383 | 7.1 | Jul 6 | Reusing a Nonce, Key Pair in Encryption in HLOS Affected: All versions, or not specified |
| CVE-2025-47378 | 7.1 | Mar 2 | Exposure of Sensitive System Information to an Unauthorized Control Sphere in HLOS Affected: All versions, or not specified |
| CVE-2024-23362 | 7.1 | Sep 2 | Improper Input Validation in Trusted Execution Environment Affected: All versions, or not specified |
| CVE-2021-35085 | 7.1 | Jun 14 | Possible buffer overflow due to lack of buffer length check during management frame Rx handling in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-30306 | 7.1 | Oct 20 | Possible buffer over read due to improper buffer allocation for file length passed from user space in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Industrial IOT,… Affected: All versions, or not specified |
| CVE-2026-24075 | 7.0 | Sep 17 | Buffer Over-read in Qualcomm IPC Affected: All versions, or not specified |
| CVE-2026-25271 | 7.0 | Jul 6 | Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service Affected: All versions, or not specified |
| CVE-2026-25260 | 7.0 | Jun 1 | Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service Affected: All versions, or not specified |
| CVE-2025-27076 | 7.0 | Aug 6 | Time-of-check Time-of-use (TOCTOU) Race Condition in Display Affected: All versions, or not specified |
| CVE-2024-45554 | 7.0 | May 6 | Use After Free in DSP Service Affected: All versions, or not specified |
| CVE-2024-45560 | 7.0 | Feb 3 | Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Affected: All versions, or not specified |
| CVE-2024-38418 | 7.0 | Feb 3 | Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Linux Affected: All versions, or not specified |
| CVE-2024-38407 | 7.0 | Nov 4 | Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Affected: 0 |
| CVE-2024-38406 | 7.0 | Nov 4 | Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Affected: 0 |
| CVE-2023-33046 | 7.0 | Feb 6 | Time-of-check Time-of-use (TOCTOU) Race Condition in Trusted Execution Environment Affected: All versions, or not specified |
| CVE-2022-25716 | 7.0 | Jan 6 | Time-of-check Time-of-use Race Condition in Multimedia Framework Affected: All versions, or not specified |
| CVE-2022-22094 | 7.0 | Sep 16 | memory corruption in Kernel due to race condition while getting mapping reference in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile Affected: All versions, or not specified |
| CVE-2022-22093 | 7.0 | Sep 16 | Memory corruption or temporary denial of service due to improper handling of concurrent hypervisor operations to attach or detach IRQs from virtual interrupt sources in Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1921 | 7.0 | Nov 12 | Possible memory corruption due to Improper handling of hypervisor unmap operations for concurrent memory operations in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-30290 | 7.0 | Sep 9 | Possible null pointer dereference due to race condition between timeline fence signal and time line fence destroy in Snapdragon Auto, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2023-33014 | 6.8 | Jan 2 | Improper Input Validation in Services Affected: All versions, or not specified |
| CVE-2021-35109 | 6.8 | Sep 2 | Possible address manipulation from APP-NS while APP-S is configuring an RG where it tries to merge the address ranges in Snapdragon Connectivity, Snapdragon Mobile Affected: All versions, or not specified |
| CVE-2021-35108 | 6.8 | Sep 2 | Improper checking of AP-S lock bit while verifying the secure resource group permissions can lead to non secure read and write access in Snapdragon Connectivity, Snapdragon Mobile Affected: All versions, or not specified |
| CVE-2026-25274 | 6.7 | Oct 6 | Use After Free in Windows WLAN Host Affected: All versions, or not specified |
| CVE-2026-24076 | 6.7 | Aug 4 | Buffer Copy Without Checking Size of Input in Bluetooth HOST Affected: All versions, or not specified |
| CVE-2025-59614 | 6.7 | Jun 1 | Out-of-bounds Write in Windows Compute Affected: All versions, or not specified |
| CVE-2025-59613 | 6.7 | Jun 1 | Stack-based Buffer Overflow in Windows Compute Affected: All versions, or not specified |
| CVE-2025-59612 | 6.7 | Jun 1 | Stack-based Buffer Overflow in Windows Compute Affected: All versions, or not specified |
| CVE-2025-59611 | 6.7 | Jun 1 | Out-of-bounds Write in Core Services Affected: All versions, or not specified |
| CVE-2025-47337 | 6.7 | Jan 6 | Use After Free in Camera Driver Affected: All versions, or not specified |
| CVE-2025-47335 | 6.7 | Jan 6 | Buffer Copy Without Checking Size of Input in Camera Driver Affected: All versions, or not specified |
| CVE-2024-33053 | 6.7 | Dec 2 | Use After Free in Video Affected: 0 |