WF
Product
Wcn3980 Firmware
On CISA KEVExploited in the wild
214
CVEs
2
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 10High 151Medium 53Low 0
Watch
Add Wcn3980 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-27071 | 9.8 | Aug 6 | Buffer Copy Without Checking Size of Input in Powerline Communication Firmware Affected: All versions, or not specified |
| CVE-2022-25729 | 9.8 | Feb 12 | Memory corruption in modem due to improper length check while copying into memory Affected: All versions, or not specified |
| CVE-2022-25727 | 9.8 | Nov 15 | Memory Corruption in modem due to improper length check while copying into memory in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music Affected: All versions, or not specified |
| CVE-2022-25674 | 9.8 | Nov 15 | Cryptographic issues in WLAN during the group key handshake of the WPA/WPA2 protocol in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music Affected: All versions, or not specified |
| CVE-2022-22105 | 9.8 | Sep 16 | Memory corruption in bluetooth due to integer overflow while processing HFP-UNIT profile in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Voice & Music Affected: All versions, or not specified |
| CVE-2022-22096 | 9.8 | Sep 2 | Memory corruption in Bluetooth HOST due to stack-based buffer overflow when when extracting data using command length parameter in Snapdragon Connectivity, Snapdragon Mobile Affected: All versions, or not specified |
| CVE-2022-25651 | 9.8 | Jun 14 | Memory corruption in bluetooth host due to integer overflow while processing BT HFP-UNIT profile in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-35081 | 9.8 | Jun 14 | Possible buffer overflow due to improper validation of SSID length received from beacon or probe response during an IBSS session in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2025-21450 | 9.1 | Jul 8 | Improper Authentication in GPS_GNSS Affected: All versions, or not specified |
| CVE-2024-38408 | 9.1 | Nov 4 | Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions Affected: All versions, or not specified |
Showing 10
