CVEs (148)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Qualcomm 285Ar8035 Firmware Cologne FirmwareCq2390m Firmware+282 moreOct 9, 2026 Oct 6, 2026 N/A· v4 7.1 HIGH· v3 N/A· v2 Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted and processed. |
1Qualcomm 1605g Fixed Wireless Access Platform Firmware 9205 Lte Modem Firmware9205s Modem Firmware+157 moreOct 9, 2026 Oct 6, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption when non-secure loader rewrites page tables before secure memory initialization. |
1Qualcomm 1605g Fixed Wireless Access Platform Firmware 9205 Lte Modem Firmware9205s Modem Firmware+157 moreOct 9, 2026 Oct 6, 2026 N/A· v4 6.6 MEDIUM· v3 N/A· v2 Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters. |
1Qualcomm 3695g Fixed Wireless Access Platform Firmware Aqt1000 FirmwareAr8031 Firmware+366 moreSep 22, 2026 Sep 17, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS when processing authentication frames with invalid FILS information element header lengths. |
1Qualcomm 208Ar8031 Firmware Ar8035 FirmwareCq7790 Firmware+205 moreAug 6, 2026 Aug 4, 2026 N/A· v4 7.6 HIGH· v3 N/A· v2 Memory Corruption when processing untrusted user input in the fastboot command handler for audio framework configuration. |
1Qualcomm 139Aqt1000 Firmware Ar8035 FirmwareCsra6620 Firmware+136 moreAug 6, 2026 Aug 4, 2026 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Information Disclosure when processing wireless network channel switch information with improperly formatted length fields. |
1Qualcomm 215Ar8031 Firmware Ar8035 FirmwareCologne Firmware+212 moreJul 22, 2026 Jun 1, 2026 N/A· v4 7.2 HIGH· v3 N/A· v2 Memory Corruption when processing fastboot commands to set display mode. |
1Qualcomm 2665g Fixed Wireless Access Platform Firmware Apq8098 FirmwareAr8031 Firmware+263 moreJul 22, 2026 Jun 1, 2026 N/A· v4 7.2 HIGH· v3 N/A· v2 Memory corruption while processing fastboot commands with improperly formatted input. |
1Qualcomm 214Ar8031 Firmware Ar8035 FirmwareCologne Firmware+211 moreJul 22, 2026 Jun 1, 2026 N/A· v4 7.1 HIGH· v3 N/A· v2 Cryptographic issue while processing partition table entries allows unauthorized modification of boot flow. |
1Qualcomm 216Ar8031 Firmware Ar8035 FirmwareCologne Firmware+213 moreJul 22, 2026 Jun 1, 2026 N/A· v4 7.2 HIGH· v3 N/A· v2 Memory corruption while processing fastboot commands with invalid input. |
1Qualcomm 212Ar8031 Firmware Ar8035 FirmwareCologne Firmware+209 moreJul 22, 2026 Jun 1, 2026 N/A· v4 7.2 HIGH· v3 N/A· v2 Memory corruption while processing fastboot OEM commands. |
1Qualcomm 2665g Fixed Wireless Access Platform Firmware Apq8098 FirmwareAr8031 Firmware+263 moreJul 22, 2026 Jun 1, 2026 N/A· v4 7.2 HIGH· v3 N/A· v2 Memory Corruption when processing display command line information due to improper initialization of a variable. |
1Qualcomm 2295g Fixed Wireless Access Platform Firmware C V2x 9150 FirmwareCq7790 Firmware+226 moreJul 22, 2026 Jun 1, 2026 N/A· v4 6.4 MEDIUM· v3 N/A· v2 Memory Corruption when processing IOCTL requests with mismatched API versions due to concurrent modification of user-space buffer. |
1Qualcomm 1865g Fixed Wireless Access Platform Firmware Ar8035 FirmwareCsr8811 Firmware+183 moreJul 22, 2026 Jun 1, 2026 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Information Disclosure when processing advertisement frames with malformed MBSSID elements of insufficient length. |
1Qualcomm 2315g Fixed Wireless Access Platform Firmware Apq8098 FirmwareAr8031 Firmware+228 moreJun 17, 2026 Mar 2, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption while using alignments for memory allocation. |
1Qualcomm 165Ar8031 Firmware Ar8035 FirmwareCsra6620 Firmware+162 moreJun 17, 2026 Mar 2, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory Corruption while invoking IOCTL calls when concurrent access to shared buffer occurs. |
1Qualcomm 1735g Fixed Wireless Access Platform Firmware Ar8031 FirmwareAr8035 Firmware+170 moreJun 17, 2026 Mar 2, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory Corruption when concurrent access to shared buffer occurs due to improper synchronization between assignment and deallocation of buffer resources. |
1Qualcomm 120Ar8035 Firmware Fastconnect 6200 FirmwareFastconnect 6900 Firmware+117 moreJun 17, 2026 Mar 2, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory Corruption when accessing a buffer after it has been freed while processing IOCTL calls. |
1Qualcomm 165Ar8031 Firmware Ar8035 FirmwareCsra6620 Firmware+162 moreJun 17, 2026 Mar 2, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory Corruption when concurrent access to shared buffer occurs during IOCTL calls. |
1Qualcomm 164Ar8031 Firmware Ar8035 FirmwareCsra6620 Firmware+161 moreJun 17, 2026 Mar 2, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption while handling different IOCTL calls from the user-space simultaneously. |