WF
Product
Wcn3988 Firmware
On CISA KEVExploited in the wild
245
CVEs
3
On KEV
9.8
Max CVSS
3
New 30D
Severity mix
Critical 9High 175Medium 61Low 0
Watch
Add Wcn3988 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-35096 | 7.5 | Jun 14 | Improper memory allocation during counter check DLM handling can lead to denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial… Affected: All versions, or not specified |
| CVE-2021-35087 | 7.5 | Jun 14 | Possible null pointer access due to improper validation of system information message to be processed in Snapdragon Industrial IOT, Snapdragon Mobile Affected: All versions, or not specified |
| CVE-2021-35086 | 7.5 | Jun 14 | Possible buffer over read due to improper validation of SIB type when processing a NR system Information message in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2021-35076 | 7.5 | Jun 14 | Possible null pointer dereference due to improper validation of RRC connection reconfiguration message in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-35073 | 7.5 | Jun 14 | Possible assertion due to improper validation of rank restriction field in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-30340 | 7.5 | Jun 14 | Reachable assertion due to improper validation of coreset in PDCCH configuration in SA mode in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial… Affected: All versions, or not specified |
| CVE-2021-30332 | 7.5 | Apr 1 | Possible assertion due to improper validation of OTA configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile Affected: All versions, or not specified |
| CVE-2021-30329 | 7.5 | Apr 1 | Possible assertion due to improper validation of TCI configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile Affected: All versions, or not specified |
| CVE-2021-30328 | 7.5 | Apr 1 | Possible assertion due to improper validation of invalid NR CSI-IM resource configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial… Affected: All versions, or not specified |
| CVE-2021-30326 | 7.5 | Feb 11 | Possible assertion due to improper size validation while processing the DownlinkPreemption IE in an RRC Reconfiguration/RRC Setup message in Snapdragon Auto, Snapdragon Compute,… Affected: All versions, or not specified |
| CVE-2021-30301 | 7.5 | Jan 13 | Possible denial of service due to out of memory while processing RRC and NAS OTA message in Snapdragon Auto, Snapdragon Industrial IOT, Snapdragon Mobile Affected: All versions, or not specified |
| CVE-2021-30287 | 7.5 | Jan 13 | Possible assertion due to improper validation of symbols configured for PDCCH monitoring in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial… Affected: All versions, or not specified |
| CVE-2021-1982 | 7.5 | Nov 12 | Possible denial of service scenario due to improper input validation of received NAS OTA message in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2026-25294 | 7.4 | Sep 17 | Buffer Over-read in WLAN Firmware Affected: All versions, or not specified |
| CVE-2026-24081 | 7.4 | Sep 17 | Buffer Over-read in BT Controller Affected: All versions, or not specified |
| CVE-2025-59617 | 7.3 | Jul 6 | Use After Free in Computer Vision Affected: All versions, or not specified |
| CVE-2024-23362 | 7.1 | Sep 2 | Improper Input Validation in Trusted Execution Environment Affected: All versions, or not specified |
| CVE-2021-35085 | 7.1 | Jun 14 | Possible buffer overflow due to lack of buffer length check during management frame Rx handling in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-30306 | 7.1 | Oct 20 | Possible buffer over read due to improper buffer allocation for file length passed from user space in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Industrial IOT,… Affected: All versions, or not specified |
| CVE-2024-45554 | 7.0 | May 6 | Use After Free in DSP Service Affected: All versions, or not specified |
| CVE-2024-38418 | 7.0 | Feb 3 | Memory corruption while parsing the memory map info in IOCTL calls Affected: All versions, or not specified |
| CVE-2024-33040 | 7.0 | Dec 2 | Memory corruption while invoking redundant release command to release one buffer from user space as race condition can occur in kernel space between buffer release and buffer… Affected: All versions, or not specified |
| CVE-2023-43543 | 7.0 | Jun 3 | Memory corruption in Audio during a playback or a recording due to race condition between allocation and deallocation of graph object Affected: All versions, or not specified |
| CVE-2023-28576 | 7.0 | Aug 8 | The buffer obtained from kernel APIs such as cam_mem_get_cpu_buf() may be readable/writable in userspace after kernel accesses it Affected: All versions, or not specified |
| CVE-2021-30290 | 7.0 | Sep 9 | Possible null pointer dereference due to race condition between timeline fence signal and time line fence destroy in Snapdragon Auto, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |