CVEs (112)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Qualcomm 220315 5g Iot Modem Firmware Aqt1000 FirmwareAr8035 Firmware+217 moreJun 17, 2026 Sep 5, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in WLAN HAL while parsing Rx buffer in processing TLV payload. |
1Qualcomm 179Aqt1000 Firmware Ar8035 FirmwareAr9380 Firmware+176 moreJun 17, 2026 Sep 5, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in WLAN HAL while processing Tx/Rx commands from QDART. |
1Qualcomm 259315 5g Iot Modem Firmware Apq5053 Aa FirmwareAqt1000 Firmware+256 moreJun 17, 2026 Sep 5, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption due to improper validation of array index in WLAN HAL when received lm_itemNum is out of range. |
1Qualcomm 270315 5g Iot Modem Firmware Aqt1000 FirmwareAr8035 Firmware+267 moreJun 17, 2026 Jun 6, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS in WLAN Firmware while processing frames with missing header fields. |
1Qualcomm 151Ar8035 Firmware Ar9380 FirmwareCsr8811 Firmware+148 moreJun 17, 2026 Jun 6, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS in WLAN Firmware while processing the received beacon or probe response frame. |
1Qualcomm 353315 5g Iot Modem Firmware 8905 Firmware8909 Firmware+350 moreJun 17, 2026 Apr 13, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption due to integer overflow or wraparound in WLAN while sending WMI cmd from host to target. |
1Qualcomm 284Apq8009 Firmware Apq8017 FirmwareApq8076 Firmware+281 moreJun 17, 2026 Mar 10, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID message. |
1Qualcomm 189Aqt1000 Firmware Ar8031 FirmwareAr8035 Firmware+186 moreJun 17, 2026 Mar 10, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in WLAN due to integer overflow to buffer overflow in WLAN during initialization phase. |
1Qualcomm 228Aqt1000 Firmware Ar8031 FirmwareAr8035 Firmware+225 moreJun 17, 2026 Feb 12, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Memory corruption due to buffer copy without checking the size of input in WLAN Firmware while processing CCKM IE in reassoc response frame. |
1Qualcomm 295Apq8009 Firmware Apq8017 FirmwareApq8064au Firmware+292 moreJun 17, 2026 Feb 12, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS in WLAN Firmware due to buffer over-read while processing probe response or beacon. |
1Qualcomm 131Ar8035 Firmware Ar9380 FirmwareCsr8811 Firmware+128 moreJun 17, 2026 Feb 12, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS due to buffer over-read in WLAN while processing an incoming management frame with incorrectly filled IEs. |
1Qualcomm 243Aqt1000 Firmware Ar8031 FirmwareAr8035 Firmware+240 moreJun 17, 2026 Feb 12, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in modem due to buffer copy without checking size of input while receiving WMI command. |
1Qualcomm 245Apq8096au Firmware Aqt1000 FirmwareAr8031 Firmware+242 moreJun 17, 2026 Feb 12, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Information disclosure due to buffer over-read in WLAN while parsing NMF frame. |
1Qualcomm 281Apq8009 Firmware Apq8017 FirmwareApq8064au Firmware+278 moreJun 17, 2026 Jan 9, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Transient DOS due to buffer over-read in WLAN while processing 802.11 management frames. |
1Qualcomm 278Apq8009 Firmware Apq8017 FirmwareApq8064au Firmware+275 moreJun 17, 2026 Jan 9, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Transient DOS due to buffer over-read in WLAN while parsing WLAN CSA action frames. |
1Qualcomm 176Aqt1000 Firmware Ar8035 FirmwareAr9380 Firmware+173 moreJun 17, 2026 Jan 9, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Information disclosure due to buffer over-read in WLAN while parsing BTM action frame. |
1Qualcomm 134Ar8035 Firmware Ar9380 FirmwareCsr8811 Firmware+131 moreJun 17, 2026 Jan 9, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Information disclosure due to buffer over-read in WLAN while WLAN frame parsing due to missing frame length check. |
1Qualcomm 134Ar8035 Firmware Ar9380 FirmwareCsr8811 Firmware+131 moreJun 17, 2026 Jan 9, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption due to buffer copy without checking size of input in modem while receiving WMI_REQUEST_STATS_CMDID command. |
1Qualcomm 161Aqt1000 Firmware Ar8035 FirmwareAr9380 Firmware+158 moreJun 17, 2026 Jan 9, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Transient DOS due to buffer over-read in WLAN while parsing corrupted NAN frames. |
1Qualcomm 161Aqt1000 Firmware Ar8035 FirmwareAr9380 Firmware+158 moreJun 17, 2026 Jan 9, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Information disclosure due to buffer over-read in WLAN while handling IBSS beacons frame. |