# Qualcomm Qca9986 Firmware


- [CVE-2024-21473](https://insights.sbomify.com/CVE-2024-21473/): Improper Input Validation in WIN SON (critical 9.8)
- [CVE-2023-33082](https://insights.sbomify.com/CVE-2023-33082/): Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Host (critical 9.8)
- [CVE-2023-33083](https://insights.sbomify.com/CVE-2023-33083/): Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Host (critical 9.8)
- [CVE-2023-33028](https://insights.sbomify.com/CVE-2023-33028/): Buffer Copy without Checking Size of Input in WLAN Firmware (critical 9.8)
- [CVE-2022-40514](https://insights.sbomify.com/CVE-2022-40514/): Buffer copy without checking size of input in WLAN Firmware (critical 9.8)
- [CVE-2021-1976](https://insights.sbomify.com/CVE-2021-1976/): Use after free in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking (critical 9.8)
- [CVE-2021-1972](https://insights.sbomify.com/CVE-2021-1972/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking (critical 9.8)
- [CVE-2023-28578](https://insights.sbomify.com/CVE-2023-28578/): Improper Input Validation in Services (critical 9.3)
- [CVE-2020-11301](https://insights.sbomify.com/CVE-2020-11301/): Information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking (critical 9.1)
- [CVE-2023-33088](https://insights.sbomify.com/CVE-2023-33088/): NULL pointer dereference in WLAN Firmware (high 8.4)
- [CVE-2022-33275](https://insights.sbomify.com/CVE-2022-33275/): Improper validation of array index in WLAN HAL (high 8.4)
- [CVE-2023-21628](https://insights.sbomify.com/CVE-2023-21628/): Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN HAL (high 8.4)

---
From sbomify Insights: https://insights.sbomify.com/products/qualcomm/qca9986-firmware/