CVEs (559)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Qualcomm 164Aqt1000 Firmware Ar8035 FirmwareFastconnect 6200 Firmware+161 moreAug 11, 2025 Apr 1, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption while processing buffer initialization, when trusted report for certain report types are generated. |
1Qualcomm 83Ar8035 Firmware C V2x 9150 FirmwareFastconnect 6700 Firmware+80 moreAug 11, 2025 Apr 1, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Information disclosure when VI calibration state set by ADSP is greater than MAX_FBSP_STATE in the response payload to AFE calibration command. |
1Qualcomm 281215 Mobile Firmware 315 5g Iot FirmwareApq8017 Firmware+278 moreAug 11, 2025 Apr 1, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption while processing finish_sign command to pass a rsp buffer. |
1Qualcomm 295215 Mobile Firmware 315 5g Iot Firmware9205 Lte Firmware+292 moreAug 11, 2025 Apr 1, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in SPS Application while requesting for public key in sorter TA. |
1Qualcomm 150315 5g Iot Modem Firmware Aqt1000 FirmwareAr8035 Firmware+147 moreAug 11, 2025 Mar 4, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS while processing multiple IKEV2 Informational Request to device from IPSEC server with different identifiers. |
1Qualcomm 307205 Mobile Firmware 215 Mobile Firmware315 5g Iot Modem Firmware+304 moreAug 11, 2025 Mar 4, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in Audio while processing RT proxy port register driver. |
1Qualcomm 333315 5g Iot Modem Firmware Aqt1000 FirmwareAr8031 Firmware+330 moreAug 11, 2025 Mar 4, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in Core Services while executing the command for removing a single event listener. |
1Qualcomm 261315 5g Iot Modem Firmware Apq8017 FirmwareAqt1000 Firmware+258 moreAug 11, 2025 Feb 6, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may point to address in the middle of ring element. |
1Qualcomm 147Aqt1000 Firmware Ar8035 FirmwareFastconnect 6200 Firmware+144 moreNov 21, 2024 Feb 6, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in Core when updating rollback version for TA and OTA feature is enabled. |
1Qualcomm 239315 5g Iot Modem Firmware 9205 Lte Modem FirmwareAqt1000 Firmware+236 moreAug 11, 2025 Feb 6, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in Core while processing control functions. |
1Qualcomm 1109206 Lte Modem Firmware Aqt1000 FirmwareAr8035 Firmware+107 moreAug 11, 2025 Feb 6, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in Audio while processing the calibration data returned from ACDB loader. |
1Qualcomm 1109206 Lte Modem Firmware Aqt1000 FirmwareAr8035 Firmware+107 moreAug 11, 2025 Feb 6, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in Audio while processing IIR config data from AFE calibration block. |
1Qualcomm 1109206 Lte Modem Firmware Aqt1000 FirmwareAr8035 Firmware+107 moreAug 11, 2025 Feb 6, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in Audio while calling START command on host voice PCM multiple times for the same RX or TX tap points. |
1Qualcomm 350315 5g Iot Modem Firmware 9206 Lte Modem FirmwareApq8017 Firmware+347 moreAug 11, 2025 Jan 2, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains `IPPROTO_NONE` as the next header. |
1Qualcomm 227315 5g Iot Modem Firmware 9206 Lte Modem FirmwareApq8017 Firmware+224 moreAug 11, 2025 Jan 2, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in Audio when memory map command is executed consecutively in ADSP. |
1Qualcomm 130Ar8035 Firmware Csra6620 FirmwareCsra6640 Firmware+127 moreAug 11, 2025 Jan 2, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption while processing Listen Sound Model client payload buffer when there is a request for Listen Sound session get parameter from ST HAL. |
1Qualcomm 136Ar8035 Firmware Csra6620 FirmwareCsra6640 Firmware+133 moreAug 11, 2025 Jan 2, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption when HLOS allocates the response payload buffer to copy the data received from ADSP in response to AVCS_LOAD_MODULE command. |
1Qualcomm 122Ar8035 Firmware Csra6620 FirmwareCsra6640 Firmware+119 moreAug 11, 2025 Jan 2, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption when resource manager sends the host kernel a reply message with multiple fragments. |
1Qualcomm 122Ar8035 Firmware Csra6620 FirmwareCsra6640 Firmware+119 moreAug 11, 2025 Jan 2, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS when WLAN firmware receives "reassoc response" frame including RIC_DATA element. |
1Qualcomm 102Ar8035 Firmware Fastconnect 6200 FirmwareFastconnect 6700 Firmware+99 moreAug 11, 2025 Jan 2, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in wearables while processing data from AON. |