# Qualcomm Wcd9378c Firmware vulnerabilities Source: https://junglewise.ai/threats/technologies/wcd9378c-firmware Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/wcd9378c-firmware.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 35 vulnerabilities in Qualcomm Wcd9378c Firmware: 0 in the last 7 days and 10 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-25290, was published on 17 September 2026. Nothing in the last four weeks, down from 10 vulnerabilities in the four before. ## Counts - Last 7 days: 0 - Last 30 days: 0 - Last 90 days: 10 - All time: 35 (0 critical, 0 exploited in the wild) ## About Qualcomm Wcd9378c Firmware Firmware for the Qualcomm WCD9378C audio codec. ## Latest Qualcomm Wcd9378c Firmware vulnerabilities - [CVE-2026-25290: Qualcomm component memory corruption in buffer validation](https://junglewise.ai/threats/cve-2026-25290-qualcomm-component-memory-corruption-in-buffer-validation) (high, CVSS 7.8, published 17 Sep 2026) - [CVE-2026-25284: Qualcomm component use-after-free information disclosure](https://junglewise.ai/threats/cve-2026-25284-qualcomm-component-use-after-free-information-disclosure) (high, CVSS 7.3, published 17 Sep 2026) - [CVE-2026-25283: Qualcomm buffer overflow in external data handling](https://junglewise.ai/threats/cve-2026-25283-qualcomm-buffer-overflow-in-external-data-handling) (high, CVSS 8.8, published 17 Sep 2026) - [CVE-2026-25282: Qualcomm component out-of-bounds memory access in data processing](https://junglewise.ai/threats/cve-2026-25282-qualcomm-component-out-of-bounds-memory-access-in-data-processing) (high, CVSS 7.9, published 17 Sep 2026) - [CVE-2026-25280: Qualcomm component memory corruption in escape handling](https://junglewise.ai/threats/cve-2026-25280-qualcomm-component-memory-corruption-in-escape-handling) (high, CVSS 7.8, published 17 Sep 2026) - [CVE-2026-25261: Qualcomm rear sensor driver memory corruption in IOCTL handling](https://junglewise.ai/threats/cve-2026-25261-qualcomm-rear-sensor-driver-memory-corruption-in-ioctl-handling) (medium, CVSS 6.7, published 17 Sep 2026) - [CVE-2026-24075: Qualcomm device control handler memory corruption via concurrent IOCTL requests](https://junglewise.ai/threats/cve-2026-24075-qualcomm-device-control-handler-memory-corruption-via-concurrent) (high, CVSS 7.8, published 17 Sep 2026) - [CVE-2026-24074: Qualcomm firmware memory corruption in data copy operations](https://junglewise.ai/threats/cve-2026-24074-qualcomm-firmware-memory-corruption-in-data-copy-operations) (high, CVSS 7.8, published 17 Sep 2026) - [CVE-2026-24073: Qualcomm decode statistics memory corruption](https://junglewise.ai/threats/cve-2026-24073-qualcomm-decode-statistics-memory-corruption) (high, CVSS 7.8, published 17 Sep 2026) - [CVE-2025-59607: Qualcomm component memory corruption on large input allocation](https://junglewise.ai/threats/cve-2025-59607-qualcomm-component-memory-corruption-on-large-input-allocation) (high, CVSS 7.8, published 17 Sep 2026) - [CVE-2026-24080: Qualcomm fingerprint TA memory corruption in request parameter handling](https://junglewise.ai/threats/cve-2026-24080-qualcomm-fingerprint-ta-memory-corruption-in-request-parameter) (high, CVSS 7.8, published 4 Aug 2026) - [CVE-2026-24076: Qualcomm memory corruption in registry value processing](https://junglewise.ai/threats/cve-2026-24076-qualcomm-memory-corruption-in-registry-value-processing) (medium, CVSS 6.7, published 4 Aug 2026) - [CVE-2026-25266: Memory corruption while processing IOCTL command when device is in power-save state.](https://junglewise.ai/threats/cve-2026-25266-memory-corruption-while-processing-ioctl-command-when-device-is) (medium, CVSS 5.5, published 4 May 2026) - [CVE-2025-47406: Information Disclosure while processing IOCTL handler callbacks without verifying buffer size.](https://junglewise.ai/threats/cve-2025-47406-information-disclosure-while-processing-ioctl-handler-callbacks) (medium, CVSS 6.1, published 4 May 2026) - [CVE-2026-21382: Memory Corruption when handling power management requests with improperly sized input/output buffers.](https://junglewise.ai/threats/cve-2026-21382-memory-corruption-when-handling-power-management-requests-with) (high, CVSS 7.8, published 6 Apr 2026) - [CVE-2026-21381: Transient DOS when receiving a service data frame with excessive length during device matching over a neighborhood…](https://junglewise.ai/threats/cve-2026-21381-transient-dos-when-receiving-a-service-data-frame-with-excessive) (high, CVSS 7.6, published 6 Apr 2026) - [CVE-2026-21380: Memory Corruption when using deprecated DMABUF IOCTL calls to manage video memory.](https://junglewise.ai/threats/cve-2026-21380-memory-corruption-when-using-deprecated-dmabuf-ioctl-calls-to) (high, CVSS 7.8, published 6 Apr 2026) - [CVE-2026-21378: Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor…](https://junglewise.ai/threats/cve-2026-21378-memory-corruption-when-accessing-an-output-buffer-without) (high, CVSS 7.8, published 6 Apr 2026) - [CVE-2026-21376: Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor…](https://junglewise.ai/threats/cve-2026-21376-memory-corruption-when-accessing-an-output-buffer-without) (high, CVSS 7.8, published 6 Apr 2026) - [CVE-2026-21375: Memory Corruption when accessing an output buffer without validating its size during IOCTL processing.](https://junglewise.ai/threats/cve-2026-21375-memory-corruption-when-accessing-an-output-buffer-without) (high, CVSS 7.8, published 6 Apr 2026) - [CVE-2026-21372: Memory Corruption when sending IOCTL requests with invalid buffer sizes during memcpy operations.](https://junglewise.ai/threats/cve-2026-21372-memory-corruption-when-sending-ioctl-requests-with-invalid-buffer) (high, CVSS 7.8, published 6 Apr 2026) - [CVE-2026-21371: Memory Corruption when retrieving output buffer with insufficient size validation.](https://junglewise.ai/threats/cve-2026-21371-memory-corruption-when-retrieving-output-buffer-with-insufficient) (high, CVSS 7.8, published 6 Apr 2026) - [CVE-2025-47390: Memory corruption while preprocessing IOCTL request in JPEG driver.](https://junglewise.ai/threats/cve-2025-47390-memory-corruption-while-preprocessing-ioctl-request-in-jpeg) (high, CVSS 7.8, published 6 Apr 2026) - [CVE-2025-47380: Memory corruption while preprocessing IOCTLs in sensors.](https://junglewise.ai/threats/cve-2025-47380-memory-corruption-while-preprocessing-ioctls-in-sensors) (high, CVSS 7.8, published 7 Jan 2026) - [CVE-2025-47356: Memory Corruption when multiple threads concurrently access and modify shared resources.](https://junglewise.ai/threats/cve-2025-47356-memory-corruption-when-multiple-threads-concurrently-access-and) (high, CVSS 7.8, published 7 Jan 2026) ## Most severe Qualcomm Wcd9378c Firmware vulnerabilities - [CVE-2026-25283: Qualcomm buffer overflow in external data handling](https://junglewise.ai/threats/cve-2026-25283-qualcomm-buffer-overflow-in-external-data-handling) (high, CVSS 8.8, published 17 Sep 2026) - [CVE-2026-25282: Qualcomm component out-of-bounds memory access in data processing](https://junglewise.ai/threats/cve-2026-25282-qualcomm-component-out-of-bounds-memory-access-in-data-processing) (high, CVSS 7.9, published 17 Sep 2026) - [CVE-2026-24080: Qualcomm fingerprint TA memory corruption in request parameter handling](https://junglewise.ai/threats/cve-2026-24080-qualcomm-fingerprint-ta-memory-corruption-in-request-parameter) (high, CVSS 7.8, published 4 Aug 2026) - [CVE-2026-21376: Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor…](https://junglewise.ai/threats/cve-2026-21376-memory-corruption-when-accessing-an-output-buffer-without) (high, CVSS 7.8, published 6 Apr 2026) - [CVE-2026-21372: Memory Corruption when sending IOCTL requests with invalid buffer sizes during memcpy operations.](https://junglewise.ai/threats/cve-2026-21372-memory-corruption-when-sending-ioctl-requests-with-invalid-buffer) (high, CVSS 7.8, published 6 Apr 2026) - [CVE-2026-21371: Memory Corruption when retrieving output buffer with insufficient size validation.](https://junglewise.ai/threats/cve-2026-21371-memory-corruption-when-retrieving-output-buffer-with-insufficient) (high, CVSS 7.8, published 6 Apr 2026) - [CVE-2025-47390: Memory corruption while preprocessing IOCTL request in JPEG driver.](https://junglewise.ai/threats/cve-2025-47390-memory-corruption-while-preprocessing-ioctl-request-in-jpeg) (high, CVSS 7.8, published 6 Apr 2026) - [CVE-2025-47367: Memory corruption while accessing a buffer during IOCTL processing.](https://junglewise.ai/threats/cve-2025-47367-memory-corruption-while-accessing-a-buffer-during-ioctl) (high, CVSS 7.8, published 4 Nov 2025) - [CVE-2025-47352: Memory corruption while processing audio streaming operations.](https://junglewise.ai/threats/cve-2025-47352-memory-corruption-while-processing-audio-streaming-operations) (high, CVSS 7.8, published 4 Nov 2025) - [CVE-2025-47355: Memory corruption while invoking remote procedure IOCTL calls.](https://junglewise.ai/threats/cve-2025-47355-memory-corruption-while-invoking-remote-procedure-ioctl-calls) (high, CVSS 7.8, published 9 Oct 2025) ## Vulnerabilities per week Nothing in the last four weeks, down from 10 vulnerabilities in the four before. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 10 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other Qualcomm technologies - [Qualcomm FastConnect 7800](https://junglewise.ai/threats/technologies/fastconnect-7800): 54 vulnerabilities - [Qualcomm FastConnect 7800 Firmware](https://junglewise.ai/threats/technologies/fastconnect-7800-firmware): 48 vulnerabilities - [Qualcomm FastConnect 6900](https://junglewise.ai/threats/technologies/fastconnect-6900): 47 vulnerabilities - [Qualcomm WSA8840](https://junglewise.ai/threats/technologies/wsa8840): 45 vulnerabilities - [Qualcomm WSA8845](https://junglewise.ai/threats/technologies/wsa8845): 45 vulnerabilities - [Qualcomm WSA8845H](https://junglewise.ai/threats/technologies/wsa8845h): 45 vulnerabilities - [Qualcomm Wsa8840 Firmware](https://junglewise.ai/threats/technologies/wsa8840-firmware): 44 vulnerabilities - [Qualcomm Wsa8845 Firmware](https://junglewise.ai/threats/technologies/wsa8845-firmware): 44 vulnerabilities - [Qualcomm Wsa8845h Firmware](https://junglewise.ai/threats/technologies/wsa8845h-firmware): 44 vulnerabilities - [Qualcomm FastConnect 6900 Firmware](https://junglewise.ai/threats/technologies/fastconnect-6900-firmware): 41 vulnerabilities - [Qualcomm WCD9380](https://junglewise.ai/threats/technologies/wcd9380): 39 vulnerabilities - [Qualcomm Wcd9380 Firmware](https://junglewise.ai/threats/technologies/wcd9380-firmware): 38 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Qualcomm Wcd9378c Firmware vulnerabilities", https://junglewise.ai/threats/technologies/wcd9378c-firmware, 9 November 2026.