WF
Product
Wcn3950 Firmware
On CISA KEVExploited in the wild
193
CVEs
3
On KEV
9.8
Max CVSS
3
New 30D
Severity mix
Critical 8High 140Medium 45Low 0
Watch
Add Wcn3950 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-25721 | 7.8 | Jan 6 | Incorrect Type Conversion in Video driver Affected: All versions, or not specified |
| CVE-2022-25717 | 7.8 | Jan 6 | Use-After-Free Issue in Display Affected: All versions, or not specified |
| CVE-2022-25715 | 7.8 | Jan 6 | Incorrect type casting in Display driver Affected: All versions, or not specified |
| CVE-2022-25711 | 7.8 | Dec 13 | Memory corruption in camera due to improper validation of array index in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2022-25712 | 7.8 | Dec 13 | Memory corruption in camera due to buffer copy without checking size of input in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon… Affected: All versions, or not specified |
| CVE-2022-25656 | 7.8 | Sep 16 | Possible integer overflow and memory corruption due to improper validation of buffer size sent to write to console when computing the payload size in Snapdragon Auto, Snapdragon… Affected: All versions, or not specified |
| CVE-2022-22095 | 7.8 | Sep 16 | Memory corruption in synx driver due to use-after-free condition in the synx driver due to accessing object handles without acquiring lock in Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2022-22097 | 7.8 | Sep 2 | Memory corruption in graphic driver due to use after free while calling multiple threads application to driver Affected: All versions, or not specified |
| CVE-2021-35130 | 7.8 | Jun 14 | Memory corruption in graphics support layer due to use after free condition in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-35102 | 7.8 | Jun 14 | Possible buffer overflow due to lack of validation for the length of NAI string read from EFS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile Affected: All versions, or not specified |
| CVE-2021-35077 | 7.8 | Feb 11 | Possible use after free scenario in compute offloads to DSP while multiple calls spawn a dynamic process in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2021-30309 | 7.8 | Feb 11 | Improper size validation of QXDM commands can lead to memory corruption in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile Affected: All versions, or not specified |
| CVE-2021-30311 | 7.8 | Jan 13 | Possible heap overflow due to lack of index validation before allocating and writing to heap buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-30298 | 7.8 | Jan 3 | Possible out of bound access due to improper validation of item size and DIAG memory pools data while switching between USB and PCIE interface in Snapdragon Auto, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-30279 | 7.8 | Jan 3 | Possible access control violation while setting current permission for VMIDs due to improper permission masking in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2021-30276 | 7.8 | Jan 3 | Improper access control while doing XPU re-configuration dynamically can lead to unauthorized access to a secure resource in Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2021-30263 | 7.8 | Nov 12 | Possible race condition can occur due to lack of synchronization mechanism when On-Device Logging node open twice concurrently in Snapdragon Compute, Snapdragon Industrial IOT,… Affected: All versions, or not specified |
| CVE-2021-1940 | 7.8 | Jul 13 | Use after free can occur due to improper handling of response from firmware in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2020-11242 | 7.8 | Apr 7 | User could gain access to secure memory due to incorrect argument into address range validation api used in SDI to capture requested contents in Snapdragon Industrial IOT,… Affected: All versions, or not specified |
| CVE-2025-47403 | 7.5 | May 4 | Buffer Over-read in WLAN Firmware Affected: All versions, or not specified |
| CVE-2025-21448 | 7.5 | Apr 7 | Buffer Over-read in WLAN Firmware Affected: All versions, or not specified |
| CVE-2024-33049 | 7.5 | Oct 7 | Buffer Over-read in WLAN Host Communication Affected: All versions, or not specified |
| CVE-2024-33012 | 7.5 | Aug 5 | Buffer Over-read in WLAN Host Affected: All versions, or not specified |
| CVE-2024-33011 | 7.5 | Aug 5 | Buffer Over-read in WLAN Host Affected: All versions, or not specified |
| CVE-2024-23353 | 7.5 | Aug 5 | Buffer Over-read in Multi Mode Call Processor Affected: All versions, or not specified |
| CVE-2024-23352 | 7.5 | Aug 5 | Loop with Unreachable Exit Condition (`Infinite Loop`) in Multi Mode Call Processor Affected: All versions, or not specified |
| CVE-2024-21479 | 7.5 | Aug 5 | Buffer Over-read in Audio Affected: All versions, or not specified |
| CVE-2024-21459 | 7.5 | Aug 5 | Buffer Over-read in WLAN HOST Affected: All versions, or not specified |
| CVE-2024-21453 | 7.5 | Apr 1 | Improper Input Validation in Automotive Telematics Affected: All versions, or not specified |
| CVE-2023-33100 | 7.5 | Apr 1 | Improper input validation in Multi-Mode Call Processor Affected: All versions, or not specified |
| CVE-2023-33103 | 7.5 | Mar 4 | Improper Input Validation in Multi-Mode Call Processor Affected: All versions, or not specified |
| CVE-2023-33084 | 7.5 | Mar 4 | Improper Release of Memory Before Removing Last Reference in Data Modem Affected: 0 |
| CVE-2023-33043 | 7.5 | Dec 5 | Reachable Assertion in Modem Affected: All versions, or not specified |
| CVE-2023-28555 | 7.5 | Aug 8 | Buffer Over-read in Audio Affected: All versions, or not specified |
| CVE-2023-21669 | 7.5 | Jun 6 | Buffer Over-read in WLAN HOST Affected: 0 |
| CVE-2022-40536 | 7.5 | Jun 6 | Improper authentication in Modem Affected: All versions, or not specified |
| CVE-2021-30301 | 7.5 | Jan 13 | Possible denial of service due to out of memory while processing RRC and NAS OTA message in Snapdragon Auto, Snapdragon Industrial IOT, Snapdragon Mobile Affected: All versions, or not specified |
| CVE-2021-30287 | 7.5 | Jan 13 | Possible assertion due to improper validation of symbols configured for PDCCH monitoring in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial… Affected: All versions, or not specified |
| CVE-2021-1982 | 7.5 | Nov 12 | Possible denial of service scenario due to improper input validation of received NAS OTA message in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2025-59617 | 7.3 | Jul 6 | Use After Free in Computer Vision Affected: All versions, or not specified |
| CVE-2026-21383 | 7.1 | Jul 6 | Reusing a Nonce, Key Pair in Encryption in HLOS Affected: All versions, or not specified |
| CVE-2025-47378 | 7.1 | Mar 2 | Exposure of Sensitive System Information to an Unauthorized Control Sphere in HLOS Affected: All versions, or not specified |
| CVE-2024-23362 | 7.1 | Sep 2 | Improper Input Validation in Trusted Execution Environment Affected: All versions, or not specified |
| CVE-2021-35085 | 7.1 | Jun 14 | Possible buffer overflow due to lack of buffer length check during management frame Rx handling in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-30306 | 7.1 | Oct 20 | Possible buffer over read due to improper buffer allocation for file length passed from user space in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Industrial IOT,… Affected: All versions, or not specified |
| CVE-2024-38418 | 7.0 | Feb 3 | Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Linux Affected: All versions, or not specified |
| CVE-2023-28576 | 7.0 | Aug 8 | Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Kernel Driver Affected: All versions, or not specified |
| CVE-2021-1921 | 7.0 | Nov 12 | Possible memory corruption due to Improper handling of hypervisor unmap operations for concurrent memory operations in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2023-33014 | 6.8 | Jan 2 | Improper Input Validation in Services Affected: All versions, or not specified |
| CVE-2021-35113 | 6.8 | Sep 2 | Possible authentication bypass due to improper order of signature verification and hashing in the signature verification call in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |