CVEs (166)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Qualcomm 111Ar8035 Firmware Csr8811 FirmwareFastconnect 6900 Firmware+108 moreJun 17, 2026 Jun 3, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Information disclosure while handling T2LM Action Frame in WLAN Host. |
1Qualcomm 182Aqt1000 Firmware Ar8035 FirmwareCsr8811 Firmware+179 moreJun 17, 2026 May 6, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS while parsing a protected 802.11az Fine Time Measurement (FTM) frame. |
1Qualcomm 130Ar8035 Firmware Csr8811 FirmwareFastconnect 6900 Firmware+127 moreJun 17, 2026 Mar 4, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Memory corruption while parsing beacon/probe response frame when AP sends more supported links in MLIE. |
1Qualcomm 148Ar8035 Firmware Csr8811 FirmwareFastconnect 6900 Firmware+145 moreJun 17, 2026 Mar 4, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Memory corruption while processing MBSSID beacon containing several subelement IE. |
1Qualcomm 136Ar8035 Firmware Csr8811 FirmwareFastconnect 6700 Firmware+133 moreJun 17, 2026 Mar 4, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption while processing TPC target power table in FTM TPC. |
1Qualcomm 135Ar8035 Firmware Csr8811 FirmwareFastconnect 6800 Firmware+132 moreJun 17, 2026 Mar 4, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS while processing an improperly formatted 802.11az Fine Time Measurement protocol frame. |
1Qualcomm 303315 5g Iot Modem Firmware Aqt1000 FirmwareAr8031 Firmware+300 moreJun 17, 2026 Feb 6, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS while parse fils IE with length equal to 1. |
1Qualcomm 65Ar8035 Firmware Fastconnect 6900 FirmwareFastconnect 7800 Firmware+62 moreJun 17, 2026 Feb 6, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Memory corruption while validating the TID to Link Mapping action request frame, when a station connects to an access point. |
1Qualcomm 232315 5g Iot Modem Firmware Aqt1000 FirmwareAr8035 Firmware+229 moreJun 17, 2026 Feb 6, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS in WLAN Firmware when the length of received beacon is less than length of ieee802.11 beacon frame. |
1Qualcomm 140Ar8035 Firmware Csr8811 FirmwareFastconnect 6800 Firmware+137 moreJun 17, 2026 Feb 6, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS while processing 11AZ RTT management action frame received through OTA. |
1Qualcomm 280Aqt1000 Firmware Ar8035 FirmwareAr9380 Firmware+277 moreJun 17, 2026 Feb 6, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS while key unwrapping process, when the given encrypted key is empty or NULL. |
1Qualcomm 69Ar8035 Firmware Fastconnect 6900 FirmwareFastconnect 7800 Firmware+66 moreJun 17, 2026 Feb 6, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Memory corruption when AP includes TID to link mapping IE in the beacons and STA is parsing the beacon TID to link mapping IE. |
1Qualcomm 350315 5g Iot Modem Firmware 9206 Lte Modem FirmwareApq8017 Firmware+347 moreJun 17, 2026 Jan 2, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains `IPPROTO_NONE` as the next header. |
1Qualcomm 122Ar8035 Firmware Csra6620 FirmwareCsra6640 Firmware+119 moreJun 17, 2026 Jan 2, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption when resource manager sends the host kernel a reply message with multiple fragments. |
1Qualcomm 122Ar8035 Firmware Csra6620 FirmwareCsra6640 Firmware+119 moreJun 17, 2026 Jan 2, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS when WLAN firmware receives "reassoc response" frame including RIC_DATA element. |
1Qualcomm 304315 5g Iot Modem Firmware Aqt1000 FirmwareAr8031 Firmware+301 moreJun 17, 2026 Jan 2, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS while processing a WMI P2P listen start command (0xD00A) sent from host. |
1Qualcomm 284315 5g Iot Modem Firmware Aqt1000 FirmwareAr8031 Firmware+281 moreJun 17, 2026 Jan 2, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS in WLAN Firmware while parsing a BTM request. |
1Qualcomm 257315 5g Iot Modem Firmware Aqt1000 FirmwareAr8031 Firmware+254 moreJun 17, 2026 Dec 5, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS while parsing WPA IES, when it is passed with length more than expected size. |
1Qualcomm 121Ar8035 Firmware Csr8811 FirmwareFastconnect 6900 Firmware+118 moreJun 17, 2026 Dec 5, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS in WLAN Firmware while processing a FTMR frame. |
1Qualcomm 223315 5g Iot Modem Firmware Aqt1000 FirmwareAr8035 Firmware+220 moreJun 17, 2026 Dec 5, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS when processing a NULL buffer while parsing WLAN vdev. |