WF
Product
Wcd9306 Firmware
37
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 8High 28Medium 1Low 0
Watch
Add Wcd9306 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-33259 | 9.8 | Apr 13 | Memory corruption due to buffer copy without checking the size of input in modem while decoding raw SMS received Affected: All versions, or not specified |
| CVE-2022-33211 | 9.8 | Apr 13 | memory corruption in modem due to improper check while calculating size of serialized CoAP message Affected: All versions, or not specified |
| CVE-2022-25745 | 9.8 | Apr 13 | Memory corruption in modem due to improper input validation while handling the incoming CoAP message Affected: All versions, or not specified |
| CVE-2022-25740 | 9.8 | Apr 13 | Memory corruption in modem due to buffer overwrite while building an IPv6 multicast address based on the MAC address of the iface Affected: All versions, or not specified |
| CVE-2022-25678 | 9.8 | Apr 13 | Memory correction in modem due to buffer overwrite during coap connection Affected: All versions, or not specified |
| CVE-2022-25729 | 9.8 | Feb 12 | Memory corruption in modem due to improper length check while copying into memory Affected: All versions, or not specified |
| CVE-2022-25727 | 9.8 | Nov 15 | Memory Corruption in modem due to improper length check while copying into memory in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music Affected: All versions, or not specified |
| CVE-2022-25674 | 9.8 | Nov 15 | Cryptographic issues in WLAN during the group key handshake of the WPA/WPA2 protocol in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music Affected: All versions, or not specified |
| CVE-2024-23353 | 7.5 | Aug 5 | Transient DOS while decoding attach reject message received by UE, when IEI is set to ESM_IEI Affected: All versions, or not specified |
| CVE-2023-21625 | 7.5 | Aug 8 | Information disclosure in Network Services due to buffer over-read while the device receives DNS response Affected: All versions, or not specified |
| CVE-2022-40505 | 7.5 | May 2 | Information disclosure due to buffer over-read in Modem while parsing DNS hostname Affected: All versions, or not specified |
| CVE-2022-33304 | 7.5 | May 2 | Transient DOS due to NULL pointer dereference in Modem while performing pullup for received TCP/UDP packet Affected: All versions, or not specified |
| CVE-2022-33295 | 7.5 | Apr 13 | Information disclosure in Modem due to buffer over-read while parsing the wms message received given the buffer and its length Affected: All versions, or not specified |
| CVE-2022-33294 | 7.5 | Apr 13 | Transient DOS in Modem due to NULL pointer dereference while receiving response of lwm2m registration/update/bootstrap request message Affected: All versions, or not specified |
| CVE-2022-33291 | 7.5 | Apr 13 | Information disclosure in Modem due to buffer over-read while receiving a IP header with malformed length Affected: All versions, or not specified |
| CVE-2022-33287 | 7.5 | Apr 13 | Information disclosure in Modem due to buffer over-read while getting length of Unfragmented headers in an IPv6 packet Affected: All versions, or not specified |
| CVE-2022-33258 | 7.5 | Apr 13 | Information disclosure due to buffer over-read in modem while reading configuration parameters Affected: All versions, or not specified |
| CVE-2022-33228 | 7.5 | Apr 13 | Information disclosure sue to buffer over-read in modem while processing ipv6 packet with hop-by-hop or destination option in header Affected: All versions, or not specified |
| CVE-2022-33223 | 7.5 | Apr 13 | Transient DOS in Modem due to null pointer dereference while processing the incoming packet with http chunked encoding Affected: All versions, or not specified |
| CVE-2022-33222 | 7.5 | Apr 13 | Information disclosure due to buffer over-read while parsing DNS response packets in Modem Affected: All versions, or not specified |
| CVE-2022-25747 | 7.5 | Apr 13 | Information disclosure in modem due to improper input validation during parsing of upcoming CoAP message Affected: All versions, or not specified |
| CVE-2022-25739 | 7.5 | Apr 13 | Denial of service in modem due to missing null check while processing the ipv6 packet received during ECM call Affected: All versions, or not specified |
| CVE-2022-25737 | 7.5 | Apr 13 | Information disclosure in modem due to missing NULL check while reading packets received from local network Affected: All versions, or not specified |
| CVE-2022-25731 | 7.5 | Apr 13 | Information disclosure in modem due to buffer over-read while processing packets from DNS server Affected: All versions, or not specified |
| CVE-2022-25730 | 7.5 | Apr 13 | Information disclosure in modem due to improper check of IP type while processing DNS server query Affected: All versions, or not specified |
| CVE-2022-25726 | 7.5 | Apr 13 | Information disclosure in modem data due to array out of bound access while handling the incoming DNS response packet Affected: All versions, or not specified |
| CVE-2022-33229 | 7.5 | Feb 12 | Information disclosure due to buffer over-read in Modem while using static array to process IPv4 packets Affected: All versions, or not specified |
| CVE-2022-25738 | 7.5 | Feb 12 | Information disclosure in modem due to buffer over-red while performing checksum of packet received Affected: All versions, or not specified |
| CVE-2022-25735 | 7.5 | Feb 12 | Denial of service in modem due to missing null check while processing TCP or UDP packets from server Affected: All versions, or not specified |
| CVE-2022-25734 | 7.5 | Feb 12 | Denial of service in modem due to missing null check while processing IP packets with padding Affected: All versions, or not specified |
| CVE-2022-25733 | 7.5 | Feb 12 | Denial of service in modem due to null pointer dereference while processing DNS packets Affected: All versions, or not specified |
| CVE-2022-25732 | 7.5 | Feb 12 | Information disclosure in modem due to buffer over read in dns client due to missing length check Affected: All versions, or not specified |
| CVE-2022-25728 | 7.5 | Feb 12 | Information disclosure in modem due to buffer over-read while processing response from DNS server Affected: All versions, or not specified |
| CVE-2022-25742 | 7.5 | Nov 15 | Denial of service in modem due to infinite loop while parsing IGMPv2 packet from server in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music Affected: All versions, or not specified |
| CVE-2021-30273 | 7.5 | Jan 3 | Possible assertion due to improper handling of IPV6 packet with invalid length in destination options header in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2025-21482 | 7.1 | Sep 24 | Cryptographic issue while performing RSA PKCS padding decoding Affected: All versions, or not specified |
| CVE-2026-25263 | 6.6 | Oct 6 | Out of Bounds write in Linux Camera Affected: All versions, or not specified |
Showing 37
