CVEs (110)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Qualcomm 110Ar8031 Firmware Ar8035 FirmwareCsra6620 Firmware+107 moreJun 17, 2026 Dec 18, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption while handling IOCTL calls to set mode. |
1Qualcomm 115Ar8031 Firmware Ar8035 FirmwareCsra6620 Firmware+112 moreJun 17, 2026 Dec 18, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption while copying packets received from unix clients. |
1Qualcomm 2139206 Lte Modem Firmware Apq8017 FirmwareAqt1000 Firmware+210 moreJun 17, 2026 Dec 18, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption while processing MFC channel configuration during music playback. |
1Qualcomm 202Apq8017 Firmware Apq8064au FirmwareAqt1000 Firmware+199 moreJun 17, 2026 Sep 24, 2025 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS while parsing the EPTM test control message to get the test pattern. |
1Qualcomm 370315 5g Iot Modem Firmware Aqt1000 FirmwareAr8031 Firmware+367 moreJun 17, 2026 Aug 6, 2025 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS while processing an ANQP message. |
1Qualcomm 235Ar8035 Firmware Ar9380 FirmwareCsr8811 Firmware+232 moreJun 17, 2026 Jul 8, 2025 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS may occur when processing vendor-specific information elements while parsing a WLAN frame for BTM requests. |
1Qualcomm 44Ar8031 Firmware Csra6620 FirmwareCsra6640 Firmware+41 moreJun 17, 2026 Jun 3, 2025 N/A· v4 7.5 HIGH· v3 N/A· v2 Memory corruption while rendering graphics using Adreno GPU drivers in Chrome. |
1Qualcomm 267315 5g Iot Modem Firmware Aqt1000 FirmwareAr8035 Firmware+264 moreJun 17, 2026 Apr 7, 2025 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS may occur while parsing SSID in action frames. |
1Qualcomm 49Aqt1000 Firmware Fastconnect 6200 FirmwareFastconnect 6700 Firmware+46 moreJun 17, 2026 Apr 7, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver. |
1Qualcomm 49Aqt1000 Firmware Fastconnect 6200 FirmwareFastconnect 6700 Firmware+46 moreJun 17, 2026 Apr 7, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver. |
1Qualcomm 51Aqt1000 Firmware Fastconnect 6200 FirmwareFastconnect 6700 Firmware+48 moreJun 17, 2026 Jan 6, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver. |
1Qualcomm 51Aqt1000 Firmware Fastconnect 6200 FirmwareFastconnect 6700 Firmware+48 moreJun 17, 2026 Jan 6, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption when IOCTL call is invoked from user-space to read board data. |
1Qualcomm 20Fastconnect 6700 Firmware Fastconnect 6900 FirmwareFastconnect 7800 Firmware+17 moreJun 17, 2026 Dec 2, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption while invoking IOCTL calls from user space to read WLAN target diagnostic information. |
1Qualcomm 54Aqt1000 Firmware Fastconnect 6200 FirmwareFastconnect 6700 Firmware+51 moreJun 17, 2026 Dec 2, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption while invoking IOCTL calls from user space to issue factory test command inside WLAN driver. |
1Qualcomm 229315 5g Iot Modem Firmware Aqt1000 FirmwareAr8035 Firmware+226 moreJun 17, 2026 Nov 4, 2024 N/A· v4 9.1 CRITICAL· v3 N/A· v2 Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions. |
1Qualcomm 282315 5g Iot Firmware 9206 Lte FirmwareApq8017 Firmware+279 moreJun 17, 2026 Sep 2, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS while processing TIM IE from beacon frame as there is no check for IE length. |
1Qualcomm 177Ar8035 Firmware Fastconnect 6200 FirmwareFastconnect 6700 Firmware+174 moreJun 17, 2026 Sep 2, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS when processing the non-transmitted BSSID profile sub-elements present within the MBSSID Information Element (IE) of a beacon frame that is received from over-the-air (OTA). |
1Qualcomm 303315 5g Iot Modem Firmware Aqt1000 FirmwareAr8031 Firmware+300 moreJun 17, 2026 Feb 6, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS while parse fils IE with length equal to 1. |
1Qualcomm 232315 5g Iot Modem Firmware Aqt1000 FirmwareAr8035 Firmware+229 moreJun 17, 2026 Feb 6, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS in WLAN Firmware when the length of received beacon is less than length of ieee802.11 beacon frame. |
1Qualcomm 280Aqt1000 Firmware Ar8035 FirmwareAr9380 Firmware+277 moreJun 17, 2026 Feb 6, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS while key unwrapping process, when the given encrypted key is empty or NULL. |