Wcd9360 Firmware
Vendor:
First CVE: Jan 21, 2021 · Active for 5 years
385
Total CVEs
More Total CVEs than 100% of tracked products
64.2
Avg CVEs / Year
Higher CVE frequency than 100% of tracked products
7.7
Avg CVSS
Higher Avg CVSS than 65% of tracked products
1.0%
KEV Rate
Higher KEV Rate than 97% of tracked products
Trends Over Time
The number and severity of CVEs published that impact Wcd9360 Firmware over time
Volume of CVEsAvg CVSS Base Score
First CVE
Jan 21, 2021
5 years ago
Most Recent CVE
Jun 1, 2026
57 days ago
CVE Severity & Scoring
Wcd9360 Firmware385 CVEs
13%
75%
12%
All CVEs353,240 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local204 (53.0%)
Network163 (42.3%)
Unknown0 (0.0%)
Physical8 (2.1%)
Adjacent Network10 (2.6%)
Attack Complexity
Low375 (97.4%)
High10 (2.6%)
Unknown0 (0.0%)
User Interaction
None382 (99.2%)
Unknown0 (0.0%)
Required3 (0.8%)
Privileges Required
Low194 (50.4%)
High11 (2.9%)
None180 (46.8%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (385 CVEs).
385 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2026-21385HIGH Memory corruption while using alignments for memory allocation. | Mar 2, 2026 | 7.8 | 73 | YES | NO |
CVE-2021-1905HIGH Possible use after free due to improper handling of memory mapping of multiple processes simultaneously. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon | May 7, 2021 | 7.8 | 67 | YES | NO |
CVE-2023-33063HIGH Memory corruption in DSP Services during a remote call from HLOS to DSP. | Dec 5, 2023 | 7.8 | 64 | YES | NO |
CVE-2021-1906MEDIUM Improper handling of address deregistration on failure can lead to new GPU address allocation failure. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon C | May 7, 2021 | 5.5 | 56 | YES | NO |
CVE-2025-27034CRITICAL Memory corruption while selecting the PLMN from SOR failed list. | Sep 24, 2025 | 9.8 | 33 | NO | NO |
CVE-2021-30351CRITICAL An out of bound memory access can occur due to improper validation of number of frames being passed during music playback in Snapdragon Auto, Snapdragon Compute, Snapdragon Connect | Jan 3, 2022 | 9.8 | 32 | NO | NO |
CVE-2022-25718CRITICAL Cryptographic issue in WLAN due to improper check on return value while authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connec | Oct 19, 2022 | 9.8 | 31 | NO | NO |
CVE-2022-25748CRITICAL Memory corruption in WLAN due to integer overflow to buffer overflow while parsing GTK frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer | Oct 19, 2022 | 9.8 | 30 | NO | NO |
CVE-2022-25720CRITICAL Memory corruption in WLAN due to out of bound array access during connect/roaming in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics C | Oct 19, 2022 | 9.8 | 30 | NO | NO |
CVE-2022-22105CRITICAL Memory corruption in bluetooth due to integer overflow while processing HFP-UNIT profile in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Voice & Music | Sep 16, 2022 | 9.8 | 30 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (385 CVEs).
CISA KEV
4 CVEs
1.0% of CVEs· 97th percentile
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (385 CVEs).
Media Mentions
Signals from CVEs in this product scope (385 CVEs).
Top CNAs Publishing CVEs For Wcd9360 Firmware
Top CWEs
Versions
No cataloged versions.