CVEs (113)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Qualcomm 145Ar8035 Firmware Fastconnect 6200 FirmwareFastconnect 6700 Firmware+142 moreJun 17, 2026 Apr 7, 2025 N/A· v4 6.7 MEDIUM· v3 N/A· v2 Memory corruption while processing multiple IOCTL calls from HLOS to DSP. |
1Qualcomm 60Ar8035 Firmware Fastconnect 6700 FirmwareFastconnect 6900 Firmware+57 moreJun 17, 2026 Apr 7, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption can occur when TME processes addresses from TZ and MPSS requests without proper validation. |
1Qualcomm 240Aqt1000 Firmware Ar8035 FirmwareCsra6620 Firmware+237 moreJun 17, 2026 Apr 7, 2025 N/A· v4 6.2 MEDIUM· v3 N/A· v2 Cryptographic issue occurs during PIN/password verification using Gatekeeper, where RPMB writes can be dropped on verification failure, potentially leading to a user throttling bypass. |
1Qualcomm 158Ar8035 Firmware Fastconnect 6700 FirmwareFastconnect 6800 Firmware+155 moreJun 17, 2026 Apr 7, 2025 N/A· v4 7.7 HIGH· v3 N/A· v2 Information disclosure while creating MQ channels. |
1Qualcomm 164Ar8035 Firmware Fastconnect 6200 FirmwareFastconnect 6700 Firmware+161 moreJun 17, 2026 Apr 7, 2025 N/A· v4 7.1 HIGH· v3 N/A· v2 Cryptographic issues while generating an asymmetric key pair for RKP use cases. |
1Qualcomm 308315 5g Iot Modem Firmware 9205 Lte Modem FirmwareAqt1000 Firmware+305 moreJun 17, 2026 Apr 7, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 There may be information disclosure during memory re-allocation in TZ Secure OS. |
1Qualcomm 189Aqt1000 Firmware Ar8035 FirmwareFastconnect 6200 Firmware+186 moreJun 17, 2026 Apr 7, 2025 N/A· v4 7.5 HIGH· v3 N/A· v2 Memory corruption while assigning memory from the source DDR memory(HLOS) to ADSP. |
1Qualcomm 233215 Firmware 315 5g Iot Modem FirmwareAqt1000 Firmware+230 moreJun 17, 2026 Mar 3, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption while calling the NPU driver APIs concurrently. |
1Qualcomm 102Ar8035 Firmware Fastconnect 6900 FirmwareFastconnect 7800 Firmware+99 moreJun 17, 2026 Mar 3, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption may occur while accessing a variable during extended back to back tests. |
1Qualcomm 187Aqt1000 Firmware Ar8035 FirmwareFastconnect 6200 Firmware+184 moreJun 17, 2026 Mar 3, 2025 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Transient DOS during hypervisor virtual I/O operation in a virtual machine. |
1Qualcomm 237Aqt1000 Firmware Ar8031 FirmwareAr8035 Firmware+234 moreJun 17, 2026 Mar 3, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Information disclosure while deriving keys for a session for any Widevine use case. |
1Qualcomm 122Ar8035 Firmware Fastconnect 6200 FirmwareFastconnect 6900 Firmware+119 moreJun 17, 2026 Feb 3, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption can occur when a compat IOCTL call is followed by a normal IOCTL call from userspace. |
1Qualcomm 157Aqt1000 Firmware Ar8035 FirmwareFastconnect 6200 Firmware+154 moreJun 17, 2026 Feb 3, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption while configuring a Hypervisor based input virtual device. |
1Qualcomm 125Ar8035 Firmware Fastconnect 6200 FirmwareFastconnect 6700 Firmware+122 moreJun 17, 2026 Jan 6, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption can occur when process-specific maps are added to the global list. If a map is removed from the global list while another thread is using it for a process-specific task, issues may arise. |
1Qualcomm 323205 Mobile Platform Firmware 315 5g Iot Modem Firmware9205 Lte Modem Firmware+320 moreJun 17, 2026 Dec 2, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption when allocating and accessing an entry in an SMEM partition continuously. |
1Qualcomm 208315 5g Iot Modem Firmware Aqt1000 FirmwareAr8035 Firmware+205 moreJun 17, 2026 Dec 2, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption while Configuring the SMR/S2CR register in Bypass mode. |
1Qualcomm 146Ar8035 Firmware Csra6620 FirmwareCsra6640 Firmware+143 moreJun 17, 2026 Nov 4, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node. |
1Qualcomm 118Ar8035 Firmware Fastconnect 6200 FirmwareFastconnect 6700 Firmware+115 moreJun 17, 2026 Oct 7, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption when invalid length is provided from HLOS for FRS/UDS request/response buffers. |
1Qualcomm 163Ar8035 Firmware Csra6620 FirmwareCsra6640 Firmware+160 moreJun 17, 2026 Sep 2, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption while processing IOCTL call for getting group info. |
1Qualcomm 243215 Mobile Firmware 315 5g Iot FirmwareAqt1000 Firmware+240 moreJun 17, 2026 Sep 2, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption when two threads try to map and unmap a single node simultaneously. |