CVEs (152)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Qualcomm 67Fastconnect 7800 Firmware Immersive Home 3210 Platform FirmwareImmersive Home 326 Platform Firmware+64 moreJun 17, 2026 Jun 3, 2025 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS while processing the tone measurement response buffer when the response buffer is out of range. |
1Qualcomm 210Ar8035 Firmware Csr8811 FirmwareFastconnect 6700 Firmware+207 moreJun 17, 2026 Jun 3, 2025 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS while processing the EHT operation IE in the received beacon frame. |
1Qualcomm 149Ar8035 Firmware Csr8811 FirmwareFastconnect 6800 Firmware+146 moreJun 17, 2026 Apr 7, 2025 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS may occur while parsing extended IE in beacon. |
1Qualcomm 60Fastconnect 6900 Firmware Fastconnect 7800 FirmwareImmersive Home 3210 Platform Firmware+57 moreJun 17, 2026 Apr 7, 2025 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Cryptographic issue may arise because the access control configuration permits Linux to read key registers in TCSR. |
1Qualcomm 308315 5g Iot Modem Firmware 9205 Lte Modem FirmwareAqt1000 Firmware+305 moreJun 17, 2026 Apr 7, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 There may be information disclosure during memory re-allocation in TZ Secure OS. |
1Qualcomm 151Ar8035 Firmware C V2x 9150 FirmwareCsr8811 Firmware+148 moreJun 17, 2026 Mar 3, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption while processing command in Glink linux. |
1Qualcomm 185Ar8035 Firmware Csr8811 FirmwareFastconnect 6700 Firmware+182 moreJun 17, 2026 Feb 3, 2025 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Memory corruption during management frame processing due to mismatch in T2LM info element. |
1Qualcomm 150Ar8035 Firmware Csr8811 FirmwareFastconnect 6700 Firmware+147 moreJun 17, 2026 Feb 3, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption may occour occur when stopping the WLAN interface after processing a WMI command from the interface. |
1Qualcomm 173Ar8035 Firmware Csr8811 FirmwareFastconnect 6700 Firmware+170 moreJun 17, 2026 Feb 3, 2025 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Memory corruption while parsing the ML IE due to invalid frame content. |
1Qualcomm 182Ar8035 Firmware Csr8811 FirmwareFastconnect 6700 Firmware+179 moreJun 17, 2026 Jan 6, 2025 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS can occur when the driver parses the per STA profile IE and tries to access the EXTN element ID without checking the IE length. |
1Qualcomm 123Ar8035 Firmware Fastconnect 6900 FirmwareFastconnect 7800 Firmware+120 moreJun 17, 2026 Dec 2, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS while parsing the ML IE when a beacon with common info length of the ML IE greater than the ML IE inside which this element is present. |
1Qualcomm 323205 Mobile Platform Firmware 315 5g Iot Modem Firmware9205 Lte Modem Firmware+320 moreJun 17, 2026 Dec 2, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption when allocating and accessing an entry in an SMEM partition continuously. |
1Qualcomm 121Ar8035 Firmware Fastconnect 6900 FirmwareFastconnect 7800 Firmware+118 moreJun 17, 2026 Nov 4, 2024 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Transient DOS while parsing fragments of MBSSID IE from beacon frame. |
1Qualcomm 115Ar8035 Firmware Fastconnect 6700 FirmwareFastconnect 6900 Firmware+112 moreJun 17, 2026 Oct 7, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS while parsing probe response and assoc response frame. |
1Qualcomm 158Ar8035 Firmware Csr8811 FirmwareFastconnect 6700 Firmware+155 moreJun 17, 2026 Oct 7, 2024 N/A· v4 8.2 HIGH· v3 N/A· v2 Information disclosure while parsing the BSS parameter change count or MLD capabilities fields of the ML IE. |
1Qualcomm 71Csr8811 Firmware Immersive Home 214 Platform FirmwareImmersive Home 216 Platform Firmware+68 moreJun 17, 2026 Oct 7, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Memory corruption while redirecting log file to any file location with any file name. |
1Qualcomm 131Csr8811 Firmware Fastconnect 6700 FirmwareFastconnect 7800 Firmware+128 moreJun 17, 2026 Oct 7, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS while parsing noninheritance IE of Extension element when length of IE is 2 of beacon frame. |
1Qualcomm 170Ar8035 Firmware Csr8811 FirmwareFastconnect 6700 Firmware+167 moreJun 17, 2026 Sep 2, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS while parsing the multi-link element Control field when common information length check is missing before updating the location. |
1Qualcomm 252Ar8035 Firmware Ar9380 FirmwareCsr8811 Firmware+249 moreJun 17, 2026 Sep 2, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing or improper. |
1Qualcomm 187Ar8035 Firmware Csr8811 FirmwareFastconnect 6700 Firmware+184 moreJun 17, 2026 Sep 2, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS while parsing the received TID-to-link mapping element of beacon/probe response frame. |