Wcd9306 Firmware

CVEs (105)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2023-21625	Qualcomm Network Services	Hig	0.53	8.2	0.00	Aug 8, 2023	Information disclosure in Network Services due to buffer over-read while the device receives DNS response.
CVE-2022-33291	Qualcomm Modem	Hig	0.53	8.2	0.00	Apr 13, 2023	Information disclosure in Modem due to buffer over-read while receiving a IP header with malformed length.
CVE-2022-33287	Qualcomm Modem	Hig	0.53	8.2	0.00	Apr 13, 2023	Information disclosure in Modem due to buffer over-read while getting length of Unfragmented headers in an IPv6 packet.
CVE-2022-25730	Qualcomm Modem	Hig	0.53	8.2	0.00	Apr 13, 2023	Information disclosure in modem due to improper check of IP type while processing DNS server query
CVE-2021-30349	Qualcomm Snapdragon	Hig	0.53	8.2	0.00	Jun 14, 2022	Improper access control sequence for AC database after memory allocation can lead to possible memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables,…
CVE-2020-11285	Qualcomm Snapdragon	Hig	0.53	8.2	0.01	May 7, 2021	Buffer over-read while unpacking the RTCP packet we may read extra byte if wrong length is provided in RTCP packets in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon…
CVE-2020-11251	Qualcomm Snapdragon	Hig	0.53	8.2	0.01	Apr 7, 2021	Out-of-bounds read vulnerability while accessing DTMF payload due to lack of check of buffer length before copying in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon…
CVE-2020-11191	Qualcomm Snapdragon	Hig	0.53	8.2	0.01	Apr 7, 2021	Out of bound read occurs while processing crafted SDP due to lack of check of null string in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon…
CVE-2025-27054	Qualcomm Fastconnect 6900 Firmware	Hig	0.51	7.8	0.00	Oct 9, 2025	Memory corruption while processing a malformed license file during reboot.
CVE-2023-43542	Qualcomm Fastconnect 6900 Firmware	Hig	0.51	7.8	0.00	Jun 3, 2024	Memory corruption while copying a keyblob`s material when the key material`s size is not accurately checked.
CVE-2023-33110	Qualcomm PCM host voice audio driver	Hig	0.51	7.8	0.00	Jan 2, 2024	The session index variable in PCM host voice audio driver initialized before PCM open, accessed during event callback from ADSP and reset during PCM close may lead to race condition between event callback - PCM close and reset session index causing memory corruption.
CVE-2023-33018	Qualcomm UIM	Hig	0.51	7.8	0.00	Dec 5, 2023	Memory corruption while using the UIM diag command to get the operators name.
CVE-2023-33017	Qualcomm UEFI Menu	Hig	0.51	7.8	0.00	Dec 5, 2023	Memory corruption in Boot while running a ListVars test in UEFI Menu during boot.
CVE-2023-28550	Qualcomm MPP	Hig	0.51	7.8	0.00	Dec 5, 2023	Memory corruption in MPP performance while accessing DSM watermark using external memory address.
CVE-2023-28546	Qualcomm SPS Application	Hig	0.51	7.8	0.00	Dec 5, 2023	Memory Corruption in SPS Application while exporting public key in sorter TA.
CVE-2023-28565	Qualcomm WLAN HAL	Hig	0.51	7.8	0.00	Sep 5, 2023	Memory corruption in WLAN HAL while handling command streams through WMI interfaces.
CVE-2021-30333	Qualcomm Snapdragon	Hig	0.51	7.8	0.00	Apr 1, 2022	Improper validation of buffer size input to the EFS file can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2021-30323	Qualcomm Snapdragon	Hig	0.51	7.8	0.00	Feb 11, 2022	Improper validation of maximum size of data write to EFS file can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2021-30268	Qualcomm Snapdragon	Hig	0.51	7.8	0.00	Jan 3, 2022	Possible heap Memory Corruption Issue due to lack of input validation when sending HWTC IQ Capture command in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon…
CVE-2021-30259	Qualcomm Snapdragon	Hig	0.51	7.8	0.00	Nov 12, 2021	Possible out of bound access due to improper validation of function table entries in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon…

CVE-2023-21625HigAug 8, 2023
Qualcomm
Network Services
risk 0.53cvss 8.2epss 0.00
Information disclosure in Network Services due to buffer over-read while the device receives DNS response.
CVE-2022-33291HigApr 13, 2023
Qualcomm
Modem
risk 0.53cvss 8.2epss 0.00
Information disclosure in Modem due to buffer over-read while receiving a IP header with malformed length.
CVE-2022-33287HigApr 13, 2023
Qualcomm
Modem
risk 0.53cvss 8.2epss 0.00
Information disclosure in Modem due to buffer over-read while getting length of Unfragmented headers in an IPv6 packet.
CVE-2022-25730HigApr 13, 2023
Qualcomm
Modem
risk 0.53cvss 8.2epss 0.00
Information disclosure in modem due to improper check of IP type while processing DNS server query
CVE-2021-30349HigJun 14, 2022
Qualcomm
Snapdragon
risk 0.53cvss 8.2epss 0.00
Improper access control sequence for AC database after memory allocation can lead to possible memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables,…
CVE-2020-11285HigMay 7, 2021
Qualcomm
Snapdragon
risk 0.53cvss 8.2epss 0.01
Buffer over-read while unpacking the RTCP packet we may read extra byte if wrong length is provided in RTCP packets in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon…
CVE-2020-11251HigApr 7, 2021
Qualcomm
Snapdragon
risk 0.53cvss 8.2epss 0.01
Out-of-bounds read vulnerability while accessing DTMF payload due to lack of check of buffer length before copying in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon…
CVE-2020-11191HigApr 7, 2021
Qualcomm
Snapdragon
risk 0.53cvss 8.2epss 0.01
Out of bound read occurs while processing crafted SDP due to lack of check of null string in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon…
CVE-2025-27054HigOct 9, 2025
Qualcomm
Fastconnect 6900 Firmware
risk 0.51cvss 7.8epss 0.00
Memory corruption while processing a malformed license file during reboot.
CVE-2023-43542HigJun 3, 2024
Qualcomm
Fastconnect 6900 Firmware
risk 0.51cvss 7.8epss 0.00
Memory corruption while copying a keyblob`s material when the key material`s size is not accurately checked.
CVE-2023-33110HigJan 2, 2024
Qualcomm
PCM host voice audio driver
risk 0.51cvss 7.8epss 0.00
The session index variable in PCM host voice audio driver initialized before PCM open, accessed during event callback from ADSP and reset during PCM close may lead to race condition between event callback - PCM close and reset session index causing memory corruption.
CVE-2023-33018HigDec 5, 2023
Qualcomm
UIM
risk 0.51cvss 7.8epss 0.00
Memory corruption while using the UIM diag command to get the operators name.
CVE-2023-33017HigDec 5, 2023
Qualcomm
UEFI Menu
risk 0.51cvss 7.8epss 0.00
Memory corruption in Boot while running a ListVars test in UEFI Menu during boot.
CVE-2023-28550HigDec 5, 2023
Qualcomm
MPP
risk 0.51cvss 7.8epss 0.00
Memory corruption in MPP performance while accessing DSM watermark using external memory address.
CVE-2023-28546HigDec 5, 2023
Qualcomm
SPS Application
risk 0.51cvss 7.8epss 0.00
Memory Corruption in SPS Application while exporting public key in sorter TA.
CVE-2023-28565HigSep 5, 2023
Qualcomm
WLAN HAL
risk 0.51cvss 7.8epss 0.00
Memory corruption in WLAN HAL while handling command streams through WMI interfaces.
CVE-2021-30333HigApr 1, 2022
Qualcomm
Snapdragon
risk 0.51cvss 7.8epss 0.00
Improper validation of buffer size input to the EFS file can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2021-30323HigFeb 11, 2022
Qualcomm
Snapdragon
risk 0.51cvss 7.8epss 0.00
Improper validation of maximum size of data write to EFS file can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2021-30268HigJan 3, 2022
Qualcomm
Snapdragon
risk 0.51cvss 7.8epss 0.00
Possible heap Memory Corruption Issue due to lack of input validation when sending HWTC IQ Capture command in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon…
CVE-2021-30259HigNov 12, 2021
Qualcomm
Snapdragon
risk 0.51cvss 7.8epss 0.00
Possible out of bound access due to improper validation of function table entries in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon…

Page 3 of 6