CVEs (234)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Qualcomm 233215 Firmware 315 5g Iot Modem FirmwareAqt1000 Firmware+230 moreJun 17, 2026 Mar 3, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption while calling the NPU driver APIs concurrently. |
1Qualcomm 161Ar8035 Firmware Csra6620 FirmwareCsra6640 Firmware+158 moreJun 17, 2026 Mar 3, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in display driver while detaching a device. |
1Qualcomm 102Ar8035 Firmware Fastconnect 6900 FirmwareFastconnect 7800 Firmware+99 moreJun 17, 2026 Mar 3, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption may occur while accessing a variable during extended back to back tests. |
1Qualcomm 244215 Firmware 315 5g Iot Modem FirmwareAqt1000 Firmware+241 moreJun 17, 2026 Mar 3, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption may occur while validating ports and channels in Audio driver. |
1Qualcomm 237Aqt1000 Firmware Ar8031 FirmwareAr8035 Firmware+234 moreJun 17, 2026 Mar 3, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Information disclosure while deriving keys for a session for any Widevine use case. |
1Qualcomm 163205 Firmware 215 Firmware315 5g Iot Firmware+160 moreJun 17, 2026 Mar 3, 2025 N/A· v4 5.3 MEDIUM· v3 N/A· v2 While processing the authentication message in UE, improper authentication may lead to information disclosure. |
1Qualcomm 165Ar8035 Firmware Fastconnect 6200 FirmwareFastconnect 6700 Firmware+162 moreJun 17, 2026 Feb 3, 2025 N/A· v4 7.5 HIGH· v3 N/A· v2 Information disclosure while parsing the OCI IE with invalid length. |
1Qualcomm 122Ar8035 Firmware Fastconnect 6200 FirmwareFastconnect 6900 Firmware+119 moreJun 17, 2026 Feb 3, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption can occur when a compat IOCTL call is followed by a normal IOCTL call from userspace. |
1Qualcomm 125Ar8035 Firmware Fastconnect 6200 FirmwareFastconnect 6700 Firmware+122 moreJun 17, 2026 Jan 6, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption can occur when process-specific maps are added to the global list. If a map is removed from the global list while another thread is using it for a process-specific task, issues may arise. |
1Qualcomm 50Fastconnect 6200 Firmware Fastconnect 6900 FirmwareFastconnect 7800 Firmware+47 moreJun 17, 2026 Dec 2, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption when invalid input is passed to invoke GPU Headroom API call. |
1Qualcomm 117Ar8035 Firmware Fastconnect 6200 FirmwareFastconnect 6700 Firmware+114 moreJun 17, 2026 Nov 4, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption during GNSS HAL process initialization. |
1Qualcomm 263205 Mobile Platform Firmware 215 Mobile Platform Firmware315 5g Iot Modem Firmware+260 moreJun 17, 2026 Nov 4, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption while processing voice packet with arbitrary data received from ADSP. |
1Qualcomm 146Ar8035 Firmware Csra6620 FirmwareCsra6640 Firmware+143 moreJun 17, 2026 Nov 4, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node. |
1Qualcomm 163Ar8035 Firmware Csra6620 FirmwareCsra6640 Firmware+160 moreJun 17, 2026 Sep 2, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption while processing IOCTL call for getting group info. |
1Qualcomm 243215 Mobile Firmware 315 5g Iot FirmwareAqt1000 Firmware+240 moreJun 17, 2026 Sep 2, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption when two threads try to map and unmap a single node simultaneously. |
1Qualcomm 197205 Mobile Firmware 215 Mobile FirmwareApq8017 Firmware+194 moreJun 17, 2026 Sep 2, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption when user provides data for FM HCI command control operations. |
1Qualcomm 282315 5g Iot Firmware 9206 Lte FirmwareApq8017 Firmware+279 moreJun 17, 2026 Sep 2, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS while processing TIM IE from beacon frame as there is no check for IE length. |
1Qualcomm 252Ar8035 Firmware Ar9380 FirmwareCsr8811 Firmware+249 moreJun 17, 2026 Sep 2, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing or improper. |
1Qualcomm 175Ar8035 Firmware Csra6620 FirmwareCsra6640 Firmware+172 moreJun 17, 2026 Sep 2, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption when BTFM client sends new messages over Slimbus to ADSP. |
1Qualcomm 197205 Mobile Platform Firmware 215 Mobile Platform FirmwareApq8017 Firmware+194 moreJun 17, 2026 Sep 2, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Transient DOS while handling PS event when Program Service name length offset value is set to 255. |