CVEs (42)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Qualcomm 1865g Fixed Wireless Access Platform Firmware Ar8035 FirmwareCsr8811 Firmware+183 moreJun 2, 2026 Jun 1, 2026 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Information Disclosure when processing advertisement frames with malformed MBSSID elements of insufficient length. |
1Qualcomm 347315 5g Iot Modem Firmware 9205 Lte Modem FirmwareAqt1000 Firmware+344 moreNov 28, 2025 Aug 6, 2025 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Information disclosure while processing the hash segment in an MBN file. |
1Qualcomm 340315 5g Iot Modem Firmware 9205 Lte Modem FirmwareAqt1000 Firmware+337 moreNov 28, 2025 Aug 6, 2025 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Information disclosure while reading data from an image using specified offset and size parameters. |
1Qualcomm 60Fastconnect 6900 Firmware Fastconnect 7800 FirmwareImmersive Home 3210 Platform Firmware+57 moreAug 19, 2025 Apr 7, 2025 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Cryptographic issue may arise because the access control configuration permits Linux to read key registers in TCSR. |
1Qualcomm 308315 5g Iot Modem Firmware 9205 Lte Modem FirmwareAqt1000 Firmware+305 moreOct 6, 2025 Apr 7, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 There may be information disclosure during memory re-allocation in TZ Secure OS. |
1Qualcomm 331315 5g Iot Modem Firmware 9205 Lte Modem FirmwareAqt1000 Firmware+328 moreOct 3, 2025 Sep 2, 2024 N/A· v4 6.8 MEDIUM· v3 N/A· v2 memory corruption when an invalid firehose patch command is invoked. |
1Qualcomm 309315 5g Iot Modem Firmware 9205 Lte Modem FirmwareAqt1000 Firmware+306 moreNov 21, 2024 Jul 1, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Transient DOS while loading the TA ELF file. |
1Qualcomm 124Ar8035 Firmware Csr8811 FirmwareFastconnect 6900 Firmware+121 moreJan 9, 2025 Jun 3, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS while processing an improperly formatted Fine Time Measurement (FTM) management frame. |
1Qualcomm 111Ar8035 Firmware Csr8811 FirmwareFastconnect 6900 Firmware+108 moreAug 11, 2025 Jun 3, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Information disclosure while handling T2LM Action Frame in WLAN Host. |
1Qualcomm 182Aqt1000 Firmware Ar8035 FirmwareCsr8811 Firmware+179 moreJan 15, 2025 May 6, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS while parsing a protected 802.11az Fine Time Measurement (FTM) frame. |
1Qualcomm 130Ar8035 Firmware Csr8811 FirmwareFastconnect 6900 Firmware+127 moreJan 9, 2025 Mar 4, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Memory corruption while parsing beacon/probe response frame when AP sends more supported links in MLIE. |
1Qualcomm 148Ar8035 Firmware Csr8811 FirmwareFastconnect 6900 Firmware+145 moreAug 11, 2025 Mar 4, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Memory corruption while processing MBSSID beacon containing several subelement IE. |
1Qualcomm 136Ar8035 Firmware Csr8811 FirmwareFastconnect 6700 Firmware+133 moreJan 10, 2025 Mar 4, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption while processing TPC target power table in FTM TPC. |
1Qualcomm 135Ar8035 Firmware Csr8811 FirmwareFastconnect 6800 Firmware+132 moreJan 10, 2025 Mar 4, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS while processing an improperly formatted 802.11az Fine Time Measurement protocol frame. |
1Qualcomm 149Ar8035 Firmware Ar9380 FirmwareCsr8811 Firmware+146 moreJan 10, 2025 Mar 4, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS in WLAN Host and Firmware when large number of open authentication frames are sent with an invalid transaction sequence number. |
1Qualcomm 140Ar8035 Firmware Csr8811 FirmwareFastconnect 6800 Firmware+137 moreNov 21, 2024 Feb 6, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS while processing 11AZ RTT management action frame received through OTA. |
1Qualcomm 239315 5g Iot Modem Firmware 9205 Lte Modem FirmwareAqt1000 Firmware+236 moreAug 11, 2025 Feb 6, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in Core while processing control functions. |
1Qualcomm 350315 5g Iot Modem Firmware 9206 Lte Modem FirmwareApq8017 Firmware+347 moreAug 11, 2025 Jan 2, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains `IPPROTO_NONE` as the next header. |
1Qualcomm 102Ar8035 Firmware Ar9380 FirmwareCsr8811 Firmware+99 moreNov 21, 2024 Jan 2, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS while parsing ieee80211_parse_mscs_ie in WIN WLAN driver. |
1Qualcomm 304315 5g Iot Modem Firmware Aqt1000 FirmwareAr8031 Firmware+301 moreAug 11, 2025 Jan 2, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS while processing a WMI P2P listen start command (0xD00A) sent from host. |