[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fiZ0hyGr4NxhuZKyYsi5S7ocLiyHQJHpmBBkeg_jqcec":3,"g5a-family:qualcomm\u002Fwcd9385":161,"g5a-ex:qualcomm\u002Fwcd9385@*":165},{"success":4,"data":5},true,{"product":6,"versions":15,"topVulnerabilitiesByEpss":16,"kevVulnerabilities":73,"seoMetadata":139,"meta":158},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":14},"qualcomm","wcd9385",0,1000,11,"2026-04-06",[],"Wcd9385 by Qualcomm is a technology product and 1000 known security vulnerabilities including 11 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[],[17,26,32,37,42,48,54,59,64,69],{"cveId":18,"description":19,"publishedDate":20,"cvssScore":21,"cvssVersion":22,"severity":23,"isKev":24,"epssScore":25},"CVE-2020-11264","Improper authentication of Non-EAPOL\u002FWAPI plaintext frames during four-way handshake can lead to arbitrary network packet injection in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music","2021-09-08",9.8,"v3.1","Critical",false,0.13186,{"cveId":27,"description":28,"publishedDate":20,"cvssScore":29,"cvssVersion":22,"severity":30,"isKev":24,"epssScore":31},"CVE-2020-11301","Improper authentication of un-encrypted plaintext Wi-Fi frames in an encrypted network can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking",7.5,"High",0.11108,{"cveId":33,"description":34,"publishedDate":35,"cvssScore":21,"cvssVersion":22,"severity":23,"isKev":24,"epssScore":36},"CVE-2021-30351","An out of bound memory access can occur due to improper validation of number of frames being passed during music playback in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking","2022-01-03",0.04018,{"cveId":38,"description":39,"publishedDate":40,"cvssScore":21,"cvssVersion":22,"severity":23,"isKev":24,"epssScore":41},"CVE-2021-1965","Possible buffer overflow due to lack of parameter length check during MBSSID scan IE parse in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking","2021-07-13",0.03016,{"cveId":43,"description":44,"publishedDate":45,"cvssScore":46,"cvssVersion":22,"severity":30,"isKev":4,"epssScore":47},"CVE-2020-11261","Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables","2021-06-09",7.8,0.01604,{"cveId":49,"description":50,"publishedDate":51,"cvssScore":52,"cvssVersion":22,"severity":30,"isKev":4,"epssScore":53},"CVE-2021-1905","Possible use after free due to improper handling of memory mapping of multiple processes simultaneously. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables","2021-05-07",8.4,0.01543,{"cveId":55,"description":56,"publishedDate":57,"cvssScore":46,"cvssVersion":22,"severity":30,"isKev":24,"epssScore":58},"CVE-2021-30317","Improper validation of program headers containing ELF metadata can lead to image verification bypass in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking","2022-02-11",0.01389,{"cveId":60,"description":61,"publishedDate":62,"cvssScore":46,"cvssVersion":22,"severity":30,"isKev":24,"epssScore":63},"CVE-2022-40507","Memory corruption due to double free in Core while mapping HLOS address to the list.","2023-06-06",0.01305,{"cveId":65,"description":66,"publishedDate":67,"cvssScore":21,"cvssVersion":22,"severity":23,"isKev":24,"epssScore":68},"CVE-2020-11167","Memory corruption while calculating L2CAP packet length in reassembly logic when remote sends more data than expected in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables","2021-01-21",0.01235,{"cveId":70,"description":71,"publishedDate":67,"cvssScore":21,"cvssVersion":22,"severity":23,"isKev":24,"epssScore":72},"CVE-2020-3686","Possible memory out of bound issue during music playback when an incorrect bit stream content is copied into array without checking the length of array in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking",0.01208,[74,83,86,92,100,107,113,118,124,128,137],{"cveId":75,"description":76,"publishedDate":77,"cvssScore":78,"severity":30,"isKev":4,"epssScore":79,"cisaVulnName":80,"cisaDateAdded":77,"cisaShortDescription":81,"cisaRequiredAction":82},"CVE-2025-21480","Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.","2025-06-03",8.6,0.0046,"Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability","Multiple Qualcomm chipsets contain an incorrect authorization vulnerability. This vulnerability allows for memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"cveId":84,"description":76,"publishedDate":77,"cvssScore":78,"severity":30,"isKev":4,"epssScore":85,"cisaVulnName":80,"cisaDateAdded":77,"cisaShortDescription":81,"cisaRequiredAction":82},"CVE-2025-21479",0.00843,{"cveId":87,"description":88,"publishedDate":77,"cvssScore":29,"severity":30,"isKev":4,"epssScore":89,"cisaVulnName":90,"cisaDateAdded":77,"cisaShortDescription":91,"cisaRequiredAction":82},"CVE-2025-27038","Memory corruption while rendering graphics using Adreno GPU drivers in Chrome.",0.01016,"Qualcomm Multiple Chipsets Use-After-Free Vulnerability","Multiple Qualcomm chipsets contain a use-after-free vulnerability. This vulnerability allows for memory corruption while rendering graphics using Adreno GPU drivers in Chrome.",{"cveId":93,"description":94,"publishedDate":95,"cvssScore":46,"severity":30,"isKev":4,"epssScore":96,"cisaVulnName":90,"cisaDateAdded":97,"cisaShortDescription":98,"cisaRequiredAction":99},"CVE-2024-43047","Memory corruption while maintaining memory maps of HLOS memory.","2024-10-07",0.00668,"2024-10-08","Multiple Qualcomm chipsets contain a use-after-free vulnerability due to memory corruption in DSP Services while maintaining memory maps of HLOS memory. ","Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.",{"cveId":101,"description":102,"publishedDate":103,"cvssScore":52,"severity":30,"isKev":4,"epssScore":104,"cisaVulnName":105,"cisaDateAdded":103,"cisaShortDescription":106,"cisaRequiredAction":99},"CVE-2023-33106","Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.","2023-12-05",0.00788,"Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability","Multiple Qualcomm chipsets contain a use of out-of-range pointer offset vulnerability due to memory corruption in Graphics while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.",{"cveId":108,"description":109,"publishedDate":110,"cvssScore":52,"severity":30,"isKev":4,"epssScore":111,"cisaVulnName":90,"cisaDateAdded":103,"cisaShortDescription":112,"cisaRequiredAction":99},"CVE-2022-22071","Possible use after free when process shell memory is freed using IOCTL munmap call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music","2022-06-14",0.00411,"Multiple Qualcomm chipsets contain a use-after-free vulnerability when process shell memory is freed using IOCTL munmap call and process initialization is in progress.",{"cveId":114,"description":115,"publishedDate":103,"cvssScore":46,"severity":30,"isKev":4,"epssScore":116,"cisaVulnName":90,"cisaDateAdded":103,"cisaShortDescription":117,"cisaRequiredAction":99},"CVE-2023-33063","Memory corruption in DSP Services during a remote call from HLOS to DSP.",0.00672,"Multiple Qualcomm chipsets contain a use-after-free vulnerability due to memory corruption in DSP Services during a remote call from HLOS to DSP.",{"cveId":119,"description":120,"publishedDate":103,"cvssScore":52,"severity":30,"isKev":4,"epssScore":121,"cisaVulnName":122,"cisaDateAdded":103,"cisaShortDescription":123,"cisaRequiredAction":99},"CVE-2023-33107","Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.",0.00739,"Qualcomm Multiple Chipsets Integer Overflow Vulnerability","Multiple Qualcomm chipsets contain an integer overflow vulnerability due to memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.",{"cveId":43,"description":44,"publishedDate":45,"cvssScore":46,"severity":30,"isKev":4,"epssScore":47,"cisaVulnName":125,"cisaDateAdded":126,"cisaShortDescription":44,"cisaRequiredAction":127},"Qualcomm Multiple Chipsets Improper Input Validation Vulnerability","2021-12-01","Apply updates per vendor instructions.",{"cveId":129,"description":130,"publishedDate":51,"cvssScore":131,"severity":132,"isKev":4,"epssScore":133,"cisaVulnName":134,"cisaDateAdded":135,"cisaShortDescription":136,"cisaRequiredAction":127},"CVE-2021-1906","Improper handling of address deregistration on failure can lead to new GPU address allocation failure. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables",6.2,"Medium",0.0052,"Qualcomm Multiple Chipsets Detection of Error Condition Without Action Vulnerability","2021-11-03","Multiple Qualcomm chipsets contain a detection of error condition without action vulnerability when improper handling of address deregistration on failure can lead to new GPU address allocation failure.",{"cveId":49,"description":50,"publishedDate":51,"cvssScore":52,"severity":30,"isKev":4,"epssScore":53,"cisaVulnName":90,"cisaDateAdded":135,"cisaShortDescription":138,"cisaRequiredAction":127},"Multiple Qualcomm Chipsets contain a use after free vulnerability due to improper handling of memory mapping of multiple processes simultaneously.",{"title":140,"metaDescription":141,"keywords":142,"structuredData":143},"Wcd9385 by Qualcomm - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Wcd9385 by Qualcomm with 1000 tracked vulnerabilities including 0 critical and 10 high-severity issues and 11 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Wcd9385 vulnerabilities, Wcd9385 security, Wcd9385 CVE, Qualcomm Wcd9385, Wcd9385 threat intelligence, Qualcomm security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Wcd9385 KEV, Wcd9385 exploited vulnerabilities",{"@context":144,"@type":145,"name":146,"description":141,"url":147,"manufacturer":148,"applicationCategory":152,"softwareVersion":153,"mainEntity":154},"https:\u002F\u002Fschema.org","SoftwareApplication","Wcd9385","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fqualcomm\u002Fwcd9385",{"@type":149,"name":150,"url":151},"Organization","Qualcomm","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fqualcomm","Security Software","Multiple versions",{"@type":155,"name":156,"description":157,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Wcd9385 Security Vulnerabilities","Security vulnerabilities affecting Wcd9385 by Qualcomm",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":159,"apiVersion":160},"2026-10-17T18:28:40.664Z","3.0",[162],{"product":163,"cves":164},"wcd9385_firmware",966,{"rows":166,"total":11,"capped":24,"failed":9},[167,171,175,179,183,187,191,195,199,203,207],{"cveId":75,"name":80,"severity":30,"cvss":78,"added":77,"epss":79,"published":168,"ranges":169,"checked":4,"hits":170,"covers":24},"2025-06-03T06:15:26.19",[],[],{"cveId":84,"name":80,"severity":30,"cvss":78,"added":77,"epss":85,"published":172,"ranges":173,"checked":4,"hits":174,"covers":24},"2025-06-03T07:15:20.933",[],[],{"cveId":87,"name":90,"severity":30,"cvss":29,"added":77,"epss":89,"published":176,"ranges":177,"checked":4,"hits":178,"covers":24},"2025-06-03T06:15:27.133",[],[],{"cveId":93,"name":90,"severity":30,"cvss":46,"added":97,"epss":96,"published":180,"ranges":181,"checked":4,"hits":182,"covers":24},"2024-10-07T13:15:15.257",[],[],{"cveId":101,"name":105,"severity":30,"cvss":52,"added":103,"epss":104,"published":184,"ranges":185,"checked":4,"hits":186,"covers":24},"2023-12-05T03:15:14.673",[],[],{"cveId":108,"name":90,"severity":30,"cvss":52,"added":103,"epss":111,"published":188,"ranges":189,"checked":4,"hits":190,"covers":24},"2022-06-14T10:15:19.003",[],[],{"cveId":114,"name":90,"severity":30,"cvss":46,"added":103,"epss":116,"published":192,"ranges":193,"checked":4,"hits":194,"covers":24},"2023-12-05T03:15:12.067",[],[],{"cveId":119,"name":122,"severity":30,"cvss":52,"added":103,"epss":121,"published":196,"ranges":197,"checked":4,"hits":198,"covers":24},"2023-12-05T03:15:14.86",[],[],{"cveId":43,"name":125,"severity":30,"cvss":46,"added":126,"epss":47,"published":200,"ranges":201,"checked":4,"hits":202,"covers":24},"2021-06-09T05:15:07.643",[],[],{"cveId":129,"name":134,"severity":132,"cvss":131,"added":135,"epss":133,"published":204,"ranges":205,"checked":4,"hits":206,"covers":24},"2021-05-07T09:15:08.28",[],[],{"cveId":49,"name":90,"severity":30,"cvss":52,"added":135,"epss":53,"published":208,"ranges":209,"checked":4,"hits":210,"covers":24},"2021-05-07T09:15:08.243",[],[]]