Qualcomm Wcn7880 vulnerabilities
169 vulnerabilities
Known vulnerabilities in Qualcomm Wcn7880, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2025-21487qualcomm, inc. · snapdragon +225 moreBuffer Over-read in Data Network Stack & ConnectivityInformation disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length.EPSS0.26%HighCVE-2025-21484qualcomm, inc. · snapdragon +173 moreBuffer Over-read in Data Network Stack & ConnectivityInformation disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet.EPSS0.26%MediumCVE-2025-21433qualcomm, inc. · snapdragon +268 moreNULL Pointer Dereference in SPS-HLOSTransient DOS when importing a PKCS#8-encoded RSA private key with a zero-sized modulus.EPSS0.09%MediumCVE-2025-21464qualcomm, inc. · snapdragon +340 moreOut-of-bounds Read in CoreInformation disclosure while reading data from an image using specified offset and size parameters.EPSS0.09%CriticalCVE-2025-21450qualcomm, inc. · snapdragon +104 moreImproper Authentication in GPS_GNSSCryptographic issue occurs due to use of insecure connection method while downloading.EPSS0.32%HighCVE-2025-21486qualcomm, inc. · snapdragon +31 moreUntrusted Pointer Dereference in DSP ServiceMemory corruption during dynamic process creation call when client is only passing address and length of shell binary.EPSS0.10%HighCVE-2025-21448qualcomm, inc. · snapdragon +267 moreBuffer Over-read in WLAN FirmwareTransient DOS may occur while parsing SSID in action frames.EPSS0.26%HighCVE-2025-21436qualcomm, inc. · snapdragon +25 moreUse After Free in DSP ServiceMemory corruption may occur while initiating two IOCTL calls simultaneously to create processes from two different threads.EPSS0.11%HighCVE-2025-21468qualcomm, inc. · snapdragon +146 moreOut-of-bounds Write in Computer VisionMemory corruption while reading response from FW, when buffer size is changed by FW while driver is using this size to write null character at the end of buffer.EPSS0.11%HighCVE-2025-21446qualcomm, inc. · snapdragon +235 moreBuffer Over-read in WLAN FirmwareTransient DOS may occur when processing vendor-specific information elements while parsing a WLAN frame for BTM requests.EPSS0.24%HighCVE-2025-21476qualcomm, inc. · snapdragon +42 moreBuffer Copy Without Checking Size of Input in Computer VisionMemory corruption when passing parameters to the Trusted Virtual Machine during the handshake.EPSS0.09%HighCVE-2025-21432qualcomm, inc. · snapdragon +239 moreDouble Free in SPS-HLOSMemory corruption while retrieving the CBOR data from TA.EPSS0.09%HighCVE-2025-21481qualcomm, inc. · snapdragon +249 moreBuffer Copy Without Checking Size of Input in HLOSMemory corruption while performing private key encryption in trusted application.EPSS0.07%HighCVE-2025-21435qualcomm, inc. · snapdragon +149 moreBuffer Over-read in WLAN Host CommunicationTransient DOS may occur while parsing extended IE in beacon.EPSS0.26%HighCVE-2025-21459qualcomm, inc. · snapdragon +123 moreBuffer Over-read in WLAN Host CommunicationTransient DOS while parsing per STA profile in ML IE.EPSS0.34%CriticalCVE-2025-21483qualcomm, inc. · snapdragon +225 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in Data Network Stack & ConnectivityMemory corruption when the UE receives an RTP packet from the network, during the reassembly of NALUs.EPSS0.42%HighCVE-2025-21485qualcomm, inc. · snapdragon +29 moreTime-of-check Time-of-use (TOCTOU) Race Condition in DSP ServiceMemory corruption while processing INIT and multimode invoke IOCTL calls on FastRPC.EPSS0.08%HighCVE-2025-21482qualcomm, inc. · snapdragon +287 moreCryptographic Issues in CoreCryptographic issue while performing RSA PKCS padding decoding.EPSS0.09%HighCVE-2025-21434qualcomm, inc. · snapdragon +121 moreBuffer Over-read in WLAN HostTransient DOS may occur while parsing EHT operation IE or EHT capability IE.EPSS0.26%MediumCVE-2025-21465qualcomm, inc. · snapdragon +347 moreOut-of-bounds Read in CoreInformation disclosure while processing the hash segment in an MBN file.EPSS0.09%