CVEs (512)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Qualcomm 95315 5g Iot Modem Firmware Ar8035 FirmwareFastconnect 6200 Firmware+92 moreJun 17, 2026 Mar 4, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS while processing PDU Release command with a parameter PDU ID out of range. |
1Qualcomm 47Ar8035 Firmware Fastconnect 6700 FirmwareFastconnect 6900 Firmware+44 moreJun 17, 2026 Mar 4, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS while processing CAG info IE received from NW. |
1Qualcomm 95315 5g Iot Modem Firmware Ar8035 FirmwareFastconnect 6200 Firmware+92 moreJun 17, 2026 Mar 4, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS while processing DL NAS Transport message, as specified in 3GPP 24.501 v16. |
1Qualcomm 95315 5g Iot Modem Firmware Ar8035 FirmwareFastconnect 6200 Firmware+92 moreJun 17, 2026 Mar 4, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS while processing multiple payload container type with incorrect container length received in DL NAS transport OTA in NR. |
1Qualcomm 51Ar8035 Firmware Fastconnect 6800 FirmwareFastconnect 6900 Firmware+48 moreJun 17, 2026 Mar 4, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Transient DOS while processing channel information for speaker protection v2 module in ADSP. |
1Qualcomm 150315 5g Iot Modem Firmware Aqt1000 FirmwareAr8035 Firmware+147 moreJun 17, 2026 Mar 4, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS while processing multiple IKEV2 Informational Request to device from IPSEC server with different identifiers. |
1Qualcomm 41Ar8035 Firmware Fastconnect 6700 FirmwareFastconnect 6900 Firmware+38 moreJun 17, 2026 Mar 4, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS while processing IE fragments from server during DTLS handshake. |
1Qualcomm 307205 Mobile Firmware 215 Mobile Firmware315 5g Iot Modem Firmware+304 moreJun 17, 2026 Mar 4, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in Audio while processing RT proxy port register driver. |
1Qualcomm 42Ar8035 Firmware Fastconnect 6700 FirmwareFastconnect 6900 Firmware+39 moreJun 17, 2026 Mar 4, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Memory corruption in Data Modem while verifying hello-verify message during the DTLS handshake. |
1Qualcomm 333315 5g Iot Modem Firmware Aqt1000 FirmwareAr8031 Firmware+330 moreJun 17, 2026 Mar 4, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in Core Services while executing the command for removing a single event listener. |
1Qualcomm 303315 5g Iot Modem Firmware Aqt1000 FirmwareAr8031 Firmware+300 moreJun 17, 2026 Feb 6, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS while parse fils IE with length equal to 1. |
1Qualcomm 232315 5g Iot Modem Firmware Aqt1000 FirmwareAr8035 Firmware+229 moreJun 17, 2026 Feb 6, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS in WLAN Firmware when the length of received beacon is less than length of ieee802.11 beacon frame. |
1Qualcomm 140Ar8035 Firmware Csr8811 FirmwareFastconnect 6800 Firmware+137 moreJun 17, 2026 Feb 6, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS while processing 11AZ RTT management action frame received through OTA. |
1Qualcomm 280Aqt1000 Firmware Ar8035 FirmwareAr9380 Firmware+277 moreJun 17, 2026 Feb 6, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS while key unwrapping process, when the given encrypted key is empty or NULL. |
1Qualcomm 129Aqt1000 Firmware Fastconnect 6200 FirmwareFastconnect 6700 Firmware+126 moreJun 17, 2026 Feb 6, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Memory corruption in video while parsing the Videoinfo, when the size of atom is greater than the videoinfo size. |
1Qualcomm 147Aqt1000 Firmware Fastconnect 6200 FirmwareFastconnect 6700 Firmware+144 moreJun 17, 2026 Feb 6, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Memory corruption in video while parsing invalid mp2 clip. |
1Qualcomm 19Qam8255p Firmware Qam8295p FirmwareQam8650p Firmware+16 moreJun 17, 2026 Feb 6, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in Automotive Multimedia due to improper access control in HAB. |
1Qualcomm 261315 5g Iot Modem Firmware Apq8017 FirmwareAqt1000 Firmware+258 moreJun 17, 2026 Feb 6, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may point to address in the middle of ring element. |
1Qualcomm 95Aqt1000 Firmware Ar8035 FirmwareC V2x 9150 Firmware+92 moreJun 17, 2026 Feb 6, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in HLOS while converting from authorization token to HIDL vector. |
1Qualcomm 147Aqt1000 Firmware Ar8035 FirmwareFastconnect 6200 Firmware+144 moreJun 17, 2026 Feb 6, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in Core when updating rollback version for TA and OTA feature is enabled. |