Skip to content

RadicalNotion.AI

We do not sell or share your personal information

© 2026 RadicalNotion.AI

Security Data

CWE Directory
CAPEC Directory
CNA Directory
CNA Report Cards
Data Sources

Calculators

CVSS Calculator
CVSS 4.0
CVSS 3.1
CVSS 3.0
CVSS 2.0

Platform

My Vulnerabilities
Insights
Notifications
Account
Pricing

Learn

All guides
What is a CVE?
What is CVSS?
The CISA KEV catalog
What is EPSS?

Company

About us
Blog
Book a demo

Get Started

Sign up
Log in

Legal

Privacy
Terms

Security data

Weaknesses (CWE)The MITRE CWE weakness catalog
Attack Patterns (CAPEC)MITRE CAPEC attack patterns
CNAsNumbering authorities + report cards
VendorsVulnerabilities by vendor

Tools

CVSS CalculatorScore CVSS 4.0, 3.1, 3.0 & 2.0

Resources

LearnPlain-English security guides
Data SourcesHow we source CVE data

About Us Blog Pricing Book a Demo

Log in

Home
Vendors
Qualcomm
Qca9990 Firmware

qualcomm qca9990 firmware Vulnerabilities: CVEs, CISA KEV & Security Advisories

140 CVEs

1 in CISA KEV

qualcomm qca9990 firmware Vulnerabilities

CVE security advisories and vulnerability history for qca9990 firmware by qualcomm.

140

Total CVEs

Published

1

In CISA KEV

Exploited in the wild

1

Public exploits

With known exploit

7.8

Avg CVSS

2021–2026

Last updated June 1, 2026

Overview

qualcomm qca9990 firmware has 140 published CVE records since 2021, of which 1 are in CISA's Known Exploited Vulnerabilities catalog and 1 have a known public exploit. The average CVSS base score across scored CVEs is 7.8.

This page aggregates every publicly disclosed vulnerability (CVE) affecting qualcomm qca9990 firmware, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of qualcomm qca9990 firmware's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical14

High94

Medium19

Low0

13 additional CVEs have no CVSS severity score.

In CISA’s Known Exploited Vulnerabilities catalog

1

One of qualcomm qca9990 firmware's CVEs is confirmed exploited in the wild.

Public exploits

1

One of qualcomm qca9990 firmware's CVEs has a known public exploit available.

Affected versions and CVEs

Browse every qualcomm qca9990 firmware version named in a CVE, then pick one to see only the CVEs that affect it.

No specific affected versions are recorded for qualcomm qca9990 firmware; the CVEs below apply to the product without a version pin.

140 CVEs

Sort

Missing Authentication for Critical Function in Boot
CVE-2026-24088CWE-306
High · CVSS 8.2
EPSS 0.0% (1th pct)2026-06-01
Use After Free in HLOS
CVE-2025-47339CWE-416
High · CVSS 7.8
EPSS 0.0% (4th pct)2026-01-06
Reachable Assertion in WLAN Firmware
CVE-2025-27066CWE-617
High · CVSS 7.5
EPSS 0.2% (38th pct)2025-08-06
Buffer Over-read in WLAN Firmware
CVE-2025-21446CWE-126
High · CVSS 7.5
EPSS 0.5% (64th pct)2025-07-08
Buffer Over-read in WLAN Firmware
CVE-2025-21448CWE-126
High · CVSS 7.5
EPSS 0.4% (60th pct)2025-04-07
High vulnerability · 2024-09-02
CVE-2024-33050
Patch
CWE-126
High · CVSS 7.5
EPSS 0.3% (53th pct)2024-09-02
High vulnerability · 2024-08-05
CVE-2024-33014
Patch
CWE-126
High · CVSS 7.5
EPSS 0.4% (61th pct)2024-08-05
High vulnerability · 2024-08-05
CVE-2024-33012
Patch
CWE-126
High · CVSS 7.5
EPSS 0.4% (61th pct)2024-08-05
High vulnerability · 2024-08-05
CVE-2024-33011
Patch
CWE-126
High · CVSS 7.5
EPSS 0.4% (61th pct)2024-08-05
Use After Free in WLAN Host
CVE-2024-33010
Patch
CWE-416
High · CVSS 7.5
EPSS 0.4% (61th pct)2024-08-05
Medium vulnerability · 2024-08-05
CVE-2024-21459
Patch
CWE-126
Medium · CVSS 6.5
EPSS 0.1% (34th pct)2024-08-05
High vulnerability · 2024-07-01
CVE-2024-23368
Patch
CWE-120
High · CVSS 7.8
EPSS 0.1% (29th pct)2024-07-01
Critical vulnerability · 2024-04-01
CVE-2024-21473CWE-20
Critical · CVSS 9.8
EPSS 0.1% (35th pct)2024-04-01
High vulnerability · 2024-03-04
CVE-2023-33105
Patch
CWE-16
High · CVSS 7.5
EPSS 2.4% (85th pct)2024-03-04
Critical vulnerability · 2024-03-04
CVE-2023-28578
Patch
CWE-20
Critical · CVSS 9.3
EPSS 0.1% (22th pct)2024-03-04
High vulnerability · 2024-02-06
CVE-2023-43536CWE-126
High · CVSS 7.5
EPSS 0.1% (31th pct)2024-02-06
High vulnerability · 2024-02-06
CVE-2023-43522
Patch
CWE-476
High · CVSS 7.5
EPSS 0.1% (35th pct)2024-02-06
Loop with Unreachable Exit Condition (Infinite Loop) in WLAN Firmware
CVE-2023-43511CWE-835
High · CVSS 7.5
EPSS 0.3% (56th pct)2024-01-02
Buffer over-read without Checking Size of Input in WLAN Host
CVE-2023-33116CWE-126
High · CVSS 7.5
EPSS 0.3% (56th pct)2024-01-02
NULL Pointer Dereference in WLAN Firmware
CVE-2023-33109CWE-476
High · CVSS 7.5
EPSS 0.2% (38th pct)2024-01-02
Buffer Over-read in WLAN Firmware
CVE-2023-33062CWE-126
High · CVSS 7.5
EPSS 0.2% (41th pct)2024-01-02
High vulnerability · 2023-12-05
CVE-2023-33098CWE-126
High · CVSS 7.5
EPSS 0.2% (41th pct)2023-12-05
High vulnerability · 2023-12-05
CVE-2023-33089CWE-476
High · CVSS 7.5
EPSS 0.2% (45th pct)2023-12-05
High vulnerability · 2023-12-05
CVE-2023-33088CWE-476
High · CVSS 8.4
EPSS 0.1% (21th pct)2023-12-05
Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Host
CVE-2023-33083CWE-120
Critical · CVSS 9.8
EPSS 0.2% (42th pct)2023-12-05
Critical vulnerability · 2023-12-05
CVE-2023-33082CWE-120
Critical · CVSS 9.8
EPSS 0.2% (41th pct)2023-12-05
High vulnerability · 2023-12-05
CVE-2023-33080CWE-126
High · CVSS 7.5
EPSS 0.2% (41th pct)2023-12-05
Use After Free in DSP Services
CVE-2023-33063
CISA KEV
Public exploit
Patch
CWE-416
Added to CISA KEV 2023-12-05
High · CVSS 8.5
EPSS 0.4% (64th pct)2023-12-05
High vulnerability · 2023-11-07
CVE-2023-33047CWE-126
High · CVSS 7.5
EPSS 0.2% (41th pct)2023-11-07
Medium vulnerability · 2023-11-07
CVE-2023-28569CWE-126
Medium · CVSS 6.1
EPSS 0.1% (17th pct)2023-11-07

Showing 30 of 140

Common weakness types

The CWE weakness categories most often found in qualcomm qca9990 firmware CVEs. Follow any weakness for its full explanation.

CWE-126Buffer Over-read27 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')11 CVEs
CWE-129Improper Validation of Array Index7 CVEs
CWE-416Use After Free7 CVEs
CWE-125Out-of-bounds Read6 CVEs
CWE-476NULL Pointer Dereference4 CVEs
CWE-787Out-of-bounds Write4 CVEs
CWE-121Stack-based Buffer Overflow2 CVEs

Disclosure activity by year

How many qualcomm qca9990 firmware CVEs were published each year.

2021

46

2022

20

2023

53

2024

16

2025

3

2026

2

Other qualcomm products

Browse vulnerabilities for other products by qualcomm.

wcd93801,205 CVEs wcd9380 firmware1,171 CVEs wsa88301,137 CVEs wsa88351,136 CVEs wcd93851,116 CVEs qca6574au1,105 CVEs wsa8830 firmware1,105 CVEs wsa8835 firmware1,104 CVEs

All qualcomm vulnerabilities

Frequently asked questions

Common questions about qualcomm qca9990 firmware vulnerabilities.

How many CVEs does qualcomm qca9990 firmware have?

qualcomm qca9990 firmware has 140 published CVE records since 2021.

How many qualcomm qca9990 firmware CVEs are in CISA KEV?

Yes — 1 of qualcomm qca9990 firmware's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Are there public exploits for qualcomm qca9990 firmware vulnerabilities?

Yes — 1 of qualcomm qca9990 firmware's CVEs have a known public exploit.

What are the most common weakness types in qualcomm qca9990 firmware CVEs?

qualcomm qca9990 firmware's CVEs most often map to these CWE weakness types: CWE-126 (Buffer Over-read), CWE-120 (Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')), CWE-129 (Improper Validation of Array Index), CWE-416 (Use After Free).

How many critical qualcomm qca9990 firmware vulnerabilities are there?

qualcomm qca9990 firmware has 14 critical and 94 high-severity CVEs.

What is the average severity of qualcomm qca9990 firmware CVEs?

The average CVSS base score across qualcomm qca9990 firmware's scored CVEs is 7.8.

References

All qualcomm vulnerabilities
The MITRE CVE Program (opens in a new tab)
Learn: What is a CVE?
CWE directory: the weakness types these CVEs map to

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track qualcomm qca9990 firmware vulnerabilities

Monitor new qualcomm qca9990 firmware vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing

On this page

Overview
Severity and exploitation
Affected versions and CVEs
Common weakness types
Disclosure activity
Other products
FAQ
References