WF
Product
Wcn3988 Firmware
On CISA KEVExploited in the wild
247
CVEs
3
On KEV
9.8
Max CVSS
3
New 30D
Severity mix
Critical 9High 177Medium 61Low 0
Watch
Add Wcn3988 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-47351 | 7.8 | Oct 9 | Integer Overflow or Wraparound in DSP Service Affected: All versions, or not specified |
| CVE-2025-47317 | 7.8 | Sep 24 | Buffer Over-read in BT Controller Affected: All versions, or not specified |
| CVE-2025-27037 | 7.8 | Sep 24 | Use After Free in Camera Driver Affected: All versions, or not specified |
| CVE-2025-21474 | 7.8 | Aug 6 | Use After Free in BTHOST Affected: All versions, or not specified |
| CVE-2025-21458 | 7.8 | Aug 6 | Use After Free in NPU Affected: All versions, or not specified |
| CVE-2025-21456 | 7.8 | Aug 6 | Use After Free in NPU Affected: All versions, or not specified |
| CVE-2025-21455 | 7.8 | Aug 6 | Time-of-check Time-of-use (TOCTOU) Race Condition in Camera_Linux Affected: All versions, or not specified |
| CVE-2025-21486 | 7.8 | Jun 3 | Untrusted Pointer Dereference in DSP Service Affected: All versions, or not specified |
| CVE-2025-21468 | 7.8 | May 6 | Out-of-bounds Write in Computer Vision Affected: All versions, or not specified |
| CVE-2025-21453 | 7.8 | May 6 | Use After Free in GPS HLOS Driver Affected: All versions, or not specified |
| CVE-2024-49845 | 7.8 | May 6 | Improper Input Validation in HLOS Affected: All versions, or not specified |
| CVE-2024-45576 | 7.8 | May 6 | Improper Validation of Array Index in Camera Driver Affected: All versions, or not specified |
| CVE-2024-45570 | 7.8 | May 6 | Use of Out-of-range Pointer Offset in Camera Driver Affected: All versions, or not specified |
| CVE-2024-45564 | 7.8 | May 6 | Use After Free in HLOS Affected: All versions, or not specified |
| CVE-2024-45557 | 7.8 | Apr 7 | Use of Out-of-range Pointer Offset in Trust Management Engine Affected: All versions, or not specified |
| CVE-2024-43067 | 7.8 | Apr 7 | Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Affected: All versions, or not specified |
| CVE-2024-49843 | 7.8 | Feb 3 | Improper Validation of Array Index in Graphics_Linux Affected: All versions, or not specified |
| CVE-2024-43048 | 7.8 | Dec 2 | Stack-based Buffer Overflow in Performance Affected: 0 |
| CVE-2024-38424 | 7.8 | Nov 4 | Use After Free in GPS Affected: All versions, or not specified |
| CVE-2024-38423 | 7.8 | Nov 4 | Buffer Copy Without Checking Size of Input in Graphics Linux Affected: All versions, or not specified |
| CVE-2024-38422 | 7.8 | Nov 4 | Integer Overflow to Buffer Overflow in Audio Affected: All versions, or not specified |
| CVE-2024-38421 | 7.8 | Nov 4 | Use After Free in Graphics Linux Affected: All versions, or not specified |
| CVE-2024-38419 | 7.8 | Nov 4 | Use After Free in Automotive GPU Affected: All versions, or not specified |
| CVE-2024-38415 | 7.8 | Nov 4 | Use After Free in Computer Vision Affected: All versions, or not specified |
| CVE-2024-23369 | 7.8 | Oct 7 | Improper Restriction of Operations within the Bounds of a Memory Buffer in HLOS Affected: All versions, or not specified |
| CVE-2024-38401 | 7.8 | Sep 2 | Use After Free in Qualcomm IPC Affected: 0 |
| CVE-2024-33038 | 7.8 | Sep 2 | Untrusted Pointer Dereference in Computer Vision Affected: 0 |
| CVE-2024-23383 | 7.8 | Aug 5 | Use After Free in Graphics Linux Affected: All versions, or not specified |
| CVE-2024-23381 | 7.8 | Aug 5 | Use After Free in Graphics Linux Affected: All versions, or not specified |
| CVE-2024-23356 | 7.8 | Aug 5 | Improper Restriction of Operations within the Bounds of a Memory Buffer in HLOS Affected: All versions, or not specified |
| CVE-2024-23355 | 7.8 | Aug 5 | Improper Restriction of Operations within the Bounds of a Memory Buffer in Automotive Affected: All versions, or not specified |
| CVE-2023-43544 | 7.8 | Jun 3 | Use After Free in Audio Affected: All versions, or not specified |
| CVE-2023-28583 | 7.8 | Jan 2 | Double Free in Data Network Stack & Connectivity Affected: All versions, or not specified |
| CVE-2023-28580 | 7.8 | Dec 5 | Buffer Copy Without Checking Size of Input in WLAN Host Affected: All versions, or not specified |
| CVE-2023-28579 | 7.8 | Dec 5 | Buffer Copy Without Checking Size of Input in WLAN Host Affected: All versions, or not specified |
| CVE-2023-22668 | 7.8 | Dec 5 | Use After Free in Audio Affected: All versions, or not specified |
| CVE-2023-22383 | 7.8 | Dec 5 | Use After Free in Camera Affected: All versions, or not specified |
| CVE-2023-21634 | 7.8 | Dec 5 | Improper Restriction of Operations within the Bounds of a Memory Buffer in Radio Interface Layer Affected: All versions, or not specified |
| CVE-2023-33074 | 7.8 | Nov 7 | Use After Free in Audio Affected: All versions, or not specified |
| CVE-2023-33034 | 7.8 | Oct 3 | Signed-to-unsigned conversion error in Audio Affected: All versions, or not specified |
| CVE-2023-24844 | 7.8 | Oct 3 | Improper Access Control in Core Affected: All versions, or not specified |
| CVE-2023-21663 | 7.8 | Sep 5 | Improper Restrictions of Operations within the Bounds of a Memory Buffer in Display Affected: All versions, or not specified |
| CVE-2023-21655 | 7.8 | Sep 5 | Integer Overflow or Wraparound in Display Affected: 0 |
| CVE-2023-21654 | 7.8 | Sep 5 | Improper Restriction of Operations within the Bounds of a Memory Buffer in Audio Affected: All versions, or not specified |
| CVE-2023-21644 | 7.8 | Sep 5 | Integer Overflow to Buffer Overflow in RIL Affected: 0 |
| CVE-2023-21636 | 7.8 | Sep 5 | Improper Validation of Array Index in Linux Affected: All versions, or not specified |
| CVE-2022-40524 | 7.8 | Sep 5 | Buffer over-read in Modem Affected: All versions, or not specified |
| CVE-2023-28577 | 7.8 | Aug 8 | In the function call related to CAM_REQ_MGR_RELEASE_BUF there is no check if the buffer is being used Affected: All versions, or not specified |
| CVE-2023-28575 | 7.8 | Aug 8 | The cam_get_device_priv function does not check the type of handle being returned (device/session/link) Affected: All versions, or not specified |
| CVE-2023-21650 | 7.8 | Aug 8 | Memory Corruption in GPS HLOS Driver when injectFdclData receives data with invalid data length Affected: All versions, or not specified |