CVEs (259)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Qualcomm 208Ar8031 Firmware Ar8035 FirmwareCq7790 Firmware+205 moreAug 6, 2026 Aug 4, 2026 N/A· v4 7.6 HIGH· v3 N/A· v2 Memory Corruption when processing untrusted user input in the fastboot command handler for audio framework configuration. |
1Qualcomm 1225g Fixed Wireless Access Platform Firmware Aqt1000 FirmwareAr8035 Firmware+119 moreAug 6, 2026 Aug 4, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 Weak configuration when UE does not verify the consistency of its additional security capabilities with the replayed capabilities. |
1Qualcomm 137Ar8035 Firmware Csra6620 FirmwareCsra6640 Firmware+134 moreAug 6, 2026 Aug 4, 2026 N/A· v4 8.1 HIGH· v3 N/A· v2 Cryptographic Issue while processing registration requests with malformed or missing authentication parameters. |
1Qualcomm 1415g Fixed Wireless Access Platform Firmware Ar8035 FirmwareCsra6620 Firmware+138 moreAug 6, 2026 Aug 4, 2026 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Information Disclosure when IPSec negotiation fails or is not established properly during NG-eCall SIP signaling. |
1Qualcomm 139Aqt1000 Firmware Ar8035 FirmwareCsra6620 Firmware+136 moreAug 6, 2026 Aug 4, 2026 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Information Disclosure when processing wireless network channel switch information with improperly formatted length fields. |
1Qualcomm 79Fastconnect 6700 Firmware Fastconnect 6900 FirmwareFastconnect 7800 Firmware+76 moreJul 7, 2026 Jul 6, 2026 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Memory Corruption when updating prepared commands with invalid port indices based on user space input exceeds supported read client limits. |
1Qualcomm 90Fastconnect 6700 Firmware Fastconnect 6900 FirmwareFastconnect 7800 Firmware+87 moreJul 7, 2026 Jul 6, 2026 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Memory Corruption when validating input batch size and buffer plane count exceeds maximum allowed values. |
1Qualcomm 107Fastconnect 6200 Firmware Fastconnect 6700 FirmwareFastconnect 6900 Firmware+104 moreJul 7, 2026 Jul 6, 2026 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Memory Corruption when handling flash commands due to outdated LED count values being used after userspace modification. |
1Qualcomm 90Fastconnect 6700 Firmware Fastconnect 6900 FirmwareFastconnect 7800 Firmware+87 moreJul 7, 2026 Jul 6, 2026 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Memory Corruption when parsing jpeg commands due to unaccounted extra writes to the buffer during validation checks. |
1Qualcomm 2665g Fixed Wireless Access Platform Firmware Apq8098 FirmwareAr8031 Firmware+263 moreJul 22, 2026 Jun 1, 2026 N/A· v4 7.2 HIGH· v3 N/A· v2 Memory corruption while processing fastboot commands with improperly formatted input. |
1Qualcomm 2665g Fixed Wireless Access Platform Firmware Apq8098 FirmwareAr8031 Firmware+263 moreJul 22, 2026 Jun 1, 2026 N/A· v4 7.2 HIGH· v3 N/A· v2 Memory Corruption when processing display command line information due to improper initialization of a variable. |
1Qualcomm 2295g Fixed Wireless Access Platform Firmware C V2x 9150 FirmwareCq7790 Firmware+226 moreJul 22, 2026 Jun 1, 2026 N/A· v4 6.4 MEDIUM· v3 N/A· v2 Memory Corruption when processing IOCTL requests with mismatched API versions due to concurrent modification of user-space buffer. |
1Qualcomm 134Ar8035 Firmware Csra6620 FirmwareCsra6640 Firmware+131 moreJul 22, 2026 Jun 1, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory Corruption when processing device identifier strings that exceed the expected maximum length. |
1Qualcomm 258Ar8035 Firmware Cologne FirmwareCq7790 Firmware+255 moreJul 22, 2026 Jun 1, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory Corruption when running a memory copy operation due to invalid writes caused by a null pointer. |
1Qualcomm 254Ar8035 Firmware Cologne FirmwareCq7790 Firmware+251 moreJun 17, 2026 May 4, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming. |
1Qualcomm 241Ar8035 Firmware Cologne FirmwareCq7790 Firmware+238 moreJun 17, 2026 May 4, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS when processing target power rate tables during channel configuration. |
1Qualcomm 149Ar8035 Firmware Cologne FirmwareCsr8811 Firmware+146 moreJun 17, 2026 Apr 6, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS when processing nonstandard FILS Discovery Frames with out-of-range action sizes during initial scans. |
1Qualcomm 1485g Fixed Wireless Access Platform Firmware Ar8035 FirmwareCsra6620 Firmware+145 moreJun 17, 2026 Apr 6, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Memory corruption when decoding corrupted satellite data files with invalid signature offsets. |
1Qualcomm 99Fastconnect 6200 Firmware Fastconnect 6700 FirmwareFastconnect 6900 Firmware+96 moreJun 17, 2026 Apr 6, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption while processing a frame request from user. |
1Qualcomm 2315g Fixed Wireless Access Platform Firmware Apq8098 FirmwareAr8031 Firmware+228 moreJun 17, 2026 Mar 2, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption while using alignments for memory allocation. |