CVEs (109)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Qualcomm 69Ar8035 Firmware Fastconnect 6900 FirmwareFastconnect 7800 Firmware+66 moreJun 17, 2026 Feb 6, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Memory corruption when AP includes TID to link mapping IE in the beacons and STA is parsing the beacon TID to link mapping IE. |
1Qualcomm 350315 5g Iot Modem Firmware 9206 Lte Modem FirmwareApq8017 Firmware+347 moreJun 17, 2026 Jan 2, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains `IPPROTO_NONE` as the next header. |
1Qualcomm 304315 5g Iot Modem Firmware Aqt1000 FirmwareAr8031 Firmware+301 moreJun 17, 2026 Jan 2, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS while processing a WMI P2P listen start command (0xD00A) sent from host. |
1Qualcomm 284315 5g Iot Modem Firmware Aqt1000 FirmwareAr8031 Firmware+281 moreJun 17, 2026 Jan 2, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS in WLAN Firmware while parsing a BTM request. |
1Qualcomm 257315 5g Iot Modem Firmware Aqt1000 FirmwareAr8031 Firmware+254 moreJun 17, 2026 Dec 5, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS while parsing WPA IES, when it is passed with length more than expected size. |
1Qualcomm 121Ar8035 Firmware Csr8811 FirmwareFastconnect 6900 Firmware+118 moreJun 17, 2026 Dec 5, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS in WLAN Firmware while processing a FTMR frame. |
1Qualcomm 223315 5g Iot Modem Firmware Aqt1000 FirmwareAr8035 Firmware+220 moreJun 17, 2026 Dec 5, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS when processing a NULL buffer while parsing WLAN vdev. |
1Qualcomm 300315 5g Iot Modem Firmware Aqt1000 FirmwareAr8031 Firmware+297 moreJun 17, 2026 Dec 5, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption when processing cmd parameters while parsing vdev. |
1Qualcomm 148Aqt1000 Firmware Ar8035 FirmwareCsr8811 Firmware+145 moreJun 17, 2026 Dec 5, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS while converting TWT (Target Wake Time) frame parameters in the OTA broadcast. |
1Qualcomm 365315 5g Iot Modem Firmware 8098 Firmware8998 Firmware+362 moreJun 17, 2026 Dec 5, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management frame. |
1Qualcomm 126Ar8035 Firmware Csr8811 FirmwareFlight Rb5 5g Platform Firmware+123 moreJun 17, 2026 Dec 5, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Under certain scenarios the WLAN Firmware will reach an assertion due to state confusion while looking up peer ids. |
1Qualcomm 184315 5g Iot Modem Firmware Aqt1000 FirmwareAr8031 Firmware+181 moreJun 17, 2026 Dec 5, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in BT controller while parsing debug commands with specific sub-opcodes at HCI interface level. |
1Qualcomm 114Ar8035 Firmware Csr8811 FirmwareImmersive Home 214 Platform Firmware+111 moreJun 17, 2026 Nov 7, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS in WLAN Firmware while parsing WLAN beacon or probe-response frame. |
1Qualcomm 115Ar8035 Firmware Csr8811 FirmwareImmersive Home 214 Platform Firmware+112 moreJun 17, 2026 Nov 7, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS in WLAN Firmware when firmware receives beacon including T2LM IE. |
1Qualcomm 114Ar8035 Firmware Csr8811 FirmwareImmersive Home 214 Platform Firmware+111 moreJun 17, 2026 Nov 7, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS in WLAN Firmware while parsing t2lm buffers. |
1Qualcomm 177Ar8035 Firmware Ar9380 FirmwareCsr8811 Firmware+174 moreJun 17, 2026 Nov 7, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS in WLAN Firmware while parsing no-inherit IES. |
1Qualcomm 128Ar8035 Firmware Csr8811 FirmwareImmersive Home 214 Platform Firmware+125 moreJun 17, 2026 Nov 7, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Memory corruption in WLAN Firmware while parsing a NAN management frame carrying a S3 attribute. |
1Qualcomm 54Csrb31024 Firmware Fastconnect 6800 FirmwareFastconnect 6900 Firmware+51 moreJun 17, 2026 Nov 7, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Memory corruption in WLAN HOST while processing the WLAN scan descriptor list. |
1Qualcomm 142Ar8035 Firmware Ar9380 FirmwareCsr8811 Firmware+139 moreJun 17, 2026 Nov 7, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Information Disclosure in WLAN Host when processing WMI event command. |
1Qualcomm 175Ar8035 Firmware Ar9380 FirmwareCsr8811 Firmware+172 moreJun 17, 2026 Oct 3, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Memory corruption in WLAN Firmware while doing a memory copy of pmk cache. |