Wcn3991 Firmware vulnerabilities

7 known vulnerabilities in Wcn3991 Firmware from Qualcomm. 7 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Snapdragon Auto, Snapdragon Compute…: Reachable Assertion

  CVE-2022-25692Dec 13, 2022Qualcomm

  Denial of service in Modem due to reachable assertion while processing the common config procedure in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

• 7.8 High severity

  Snapdragon Auto, Snapdragon Compute…: Integer Overflow or Wraparound

  CVE-2022-25656Sep 16, 2022Qualcomm

  Possible integer overflow and memory corruption due to improper validation of buffer size sent to write to console when computing the payload size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Sn

• 7.8 High severity

  Snapdragon Compute, Snapdragon Connectivity…: Use After Free

  CVE-2022-22095Sep 16, 2022Qualcomm

  Memory corruption in synx driver due to use-after-free condition in the synx driver due to accessing object handles without acquiring lock in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

• 7.0 High severity

  Snapdragon Compute, Snapdragon Connectivity…: Time-of-check Time-of-use (TOCTOU) Race Condition

  CVE-2022-22094Sep 16, 2022Qualcomm

  memory corruption in Kernel due to race condition while getting mapping reference in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

• 7.0 High severity

  Snapdragon Compute, Snapdragon Connectivity…: Time-of-check Time-of-use (TOCTOU) Race Condition

  CVE-2022-22093Sep 16, 2022Qualcomm

  Memory corruption or temporary denial of service due to improper handling of concurrent hypervisor operations to attach or detach IRQs from virtual interrupt sources in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

• 9.8 Critical severity

  Snapdragon Connectivity, Snapdragon Mobile: Out-of-bounds Write

  CVE-2022-22096Sep 2, 2022Qualcomm

  Memory corruption in Bluetooth HOST due to stack-based buffer overflow when when extracting data using command length parameter in Snapdragon Connectivity, Snapdragon Mobile

• 7.8 High severity

  Snapdragon Auto, Snapdragon Compute…: Missing Release of Memory after Effective Lifetime

  CVE-2022-22067Sep 2, 2022Qualcomm

  Potential memory leak in modem during the processing of NSA RRC Reconfiguration with invalid Radio Bearer Config in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile