Qualcomm Wcd9390
365 CVEs affecting Qualcomm Wcd9390. Latest disclosed: 2026-08-04. Critical: 19, High: 293.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-27034 | Critical | 9.8 | 2025-09-24 | Memory corruption while selecting the PLMN from SOR failed list. |
CVE-2025-21483 | Critical | 9.8 | 2025-09-24 | Memory corruption when the UE receives an RTP packet from the network, during the reassembly of NALUs. |
CVE-2024-45569 | Critical | 9.8 | 2025-02-03 | Memory corruption while parsing the ML IE due to invalid frame content. |
CVE-2023-43553 | Critical | 9.8 | 2024-03-04 | Memory corruption while parsing beacon/probe response frame when AP sends more supported links in MLIE. |
CVE-2023-43552 | Critical | 9.8 | 2024-03-04 | Memory corruption while processing MBSSID beacon containing several subelement IE. |
CVE-2023-28582 | Critical | 9.8 | 2024-03-04 | Memory corruption in Data Modem while verifying hello-verify message during the DTLS handshake. |
CVE-2023-33045 | Critical | 9.8 | 2023-11-07 | Memory corruption in WLAN Firmware while parsing a NAN management frame carrying a S3 attribute. |
CVE-2023-22388 | Critical | 9.8 | 2023-11-07 | Memory Corruption in Multi-mode Call Processor while processing bit mask API. |
CVE-2023-33028 | Critical | 9.8 | 2023-10-03 | Memory corruption in WLAN Firmware while doing a memory copy of pmk cache. |
CVE-2023-24855 | Critical | 9.8 | 2023-10-03 | Memory corruption in Modem while processing security related configuration before AS Security Exchange. |
CVE-2026-25289 | Critical | 9.6 | 2026-08-04 | Memory Corruption when processing Device Capability Extended attributes in certain NAN Service Discovery Frames with invalid length values. |
CVE-2023-43538 | Critical | 9.3 | 2024-06-03 | Memory corruption in TZ Secure OS while Tunnel Invoke Manager initialization. |
CVE-2023-28578 | Critical | 9.3 | 2024-03-04 | Memory corruption in Core Services while executing the command for removing a single event listener. |
CVE-2023-33072 | Critical | 9.3 | 2024-02-06 | Memory corruption in Core while processing control functions. |
CVE-2025-21450 | Critical | 9.1 | 2025-07-08 | Cryptographic issue occurs due to use of insecure connection method while downloading. |
CVE-2023-43551 | Critical | 9.1 | 2024-06-03 | Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode C… |
CVE-2023-33054 | Critical | 9.1 | 2023-12-05 | Cryptographic issue in GPS HLOS Driver while downloading Qualcomm GNSS assistance data. |
CVE-2023-28540 | Critical | 9.1 | 2023-10-03 | Cryptographic issue in Data Modem due to improper authentication during TLS handshake. |
CVE-2023-28574 | Critical | 9.0 | 2023-11-07 | Memory corruption in core services when Diag handler receives a command to configure event listeners. |
CVE-2026-25277 | High | 8.8 | 2026-06-01 | Memory corruption while using Strongbox due to buffer overflow. |