CVEs (315)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Qualcomm 225205 Mobile Platform Firmware 215 Mobile Platform FirmwareApq8017 Firmware+222 moreNov 28, 2025 Sep 24, 2025 N/A· v4 8.2 HIGH· v3 N/A· v2 Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length. |
1Qualcomm 174Apq8064au Firmware Aqt1000 FirmwareFastconnect 6200 Firmware+171 moreFeb 10, 2026 Sep 24, 2025 N/A· v4 8.2 HIGH· v3 N/A· v2 Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet. |
1Qualcomm 225Apq8017 Firmware Apq8064au FirmwareAqt1000 Firmware+222 moreNov 28, 2025 Sep 24, 2025 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Memory corruption when the UE receives an RTP packet from the network, during the reassembly of NALUs. |
1Qualcomm 287315 5g Iot Modem Firmware 9205 Lte Modem Firmware9206 Lte Modem Firmware+284 moreDec 2, 2025 Sep 24, 2025 N/A· v4 7.1 HIGH· v3 N/A· v2 Cryptographic issue while performing RSA PKCS padding decoding. |
1Qualcomm 173205 Mobile Firmware 215 Mobile FirmwareApq8064au Firmware+170 moreFeb 11, 2026 Jul 8, 2025 N/A· v4 8.2 HIGH· v3 N/A· v2 Information disclosure while decoding this RTP packet Payload when UE receives the RTP packet from the network. |
1Qualcomm 232205 Mobile Platform Firmware 215 Mobile Platform FirmwareApq8017 Firmware+229 moreNov 28, 2025 Jun 3, 2025 N/A· v4 8.2 HIGH· v3 N/A· v2 Information disclosure when an invalid RTCP packet is received during a VoLTE/VoWiFi IMS call. |
1Qualcomm 223205 Mobile Platform Firmware 215 Mobile Platform FirmwareApq8017 Firmware+220 moreNov 28, 2025 Jun 3, 2025 N/A· v4 8.2 HIGH· v3 N/A· v2 Information disclosure may occur while processing goodbye RTCP packet from network. |
1Qualcomm 232205 Mobile Platform Firmware 215 Mobile Platform FirmwareApq8017 Firmware+229 moreNov 28, 2025 Jun 3, 2025 N/A· v4 8.2 HIGH· v3 N/A· v2 Information disclosure may occur while decoding the RTP packet with invalid header extension from network. |
1Qualcomm 79Fastconnect 6200 Firmware Fastconnect 6700 FirmwareFastconnect 6900 Firmware+76 moreAug 20, 2025 Jun 3, 2025 N/A· v4 8.2 HIGH· v3 N/A· v2 Information disclosure may occur while decoding the RTP packet with improper header length for number of contributing sources. |
1Qualcomm 90Aqt1000 Firmware Fastconnect 6200 FirmwareFastconnect 6700 Firmware+87 moreNov 28, 2025 Jun 3, 2025 N/A· v4 6.6 MEDIUM· v3 N/A· v2 Memory corruption while processing IOCTL command to handle buffers associated with a session. |
1Qualcomm 259205 Mobile Firmware 215 Mobile Firmware315 5g Iot Modem Firmware+256 moreAug 11, 2025 May 6, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption while processing a data structure, when an iterator is accessed after it has been removed, potential failures occur. |
1Qualcomm 78C V2x 9150 Firmware Fastconnect 6800 FirmwareFastconnect 6900 Firmware+75 moreAug 11, 2025 May 6, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption during concurrent access to server info object due to unprotected critical field. |
1Qualcomm 223315 5g Iot Modem Firmware Apq8017 FirmwareApq8064au Firmware+220 moreOct 6, 2025 Apr 7, 2025 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS while connecting STA to AP and initiating ADD TS request from AP to establish TSpec session. |
1Qualcomm 145Apq8064au Firmware Fastconnect 6200 FirmwareFastconnect 6700 Firmware+142 moreOct 6, 2025 Apr 7, 2025 N/A· v4 8.2 HIGH· v3 N/A· v2 Information disclosure may occur during a video call if a device resets due to a non-conforming RTCP packet that doesn`t adhere to RFC standards. |
1Qualcomm 206205 Firmware Apq8017 FirmwareAr8035 Firmware+203 moreAug 11, 2025 Mar 3, 2025 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS may occur while processing the country IE. |
1Qualcomm 163205 Firmware 215 Firmware315 5g Iot Firmware+160 moreAug 11, 2025 Mar 3, 2025 N/A· v4 5.3 MEDIUM· v3 N/A· v2 While processing the authentication message in UE, improper authentication may lead to information disclosure. |
1Qualcomm 76Ar8035 Firmware C V2x 9150 FirmwareCsrb31024 Firmware+73 moreAug 11, 2025 Jan 6, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Information disclosure while invoking callback function of sound model driver from ADSP for every valid opcode received from sound model driver. |
1Qualcomm 323205 Mobile Platform Firmware 315 5g Iot Modem Firmware9205 Lte Modem Firmware+320 moreDec 12, 2024 Dec 2, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption when allocating and accessing an entry in an SMEM partition continuously. |
1Qualcomm 149206 Lte Modem Firmware Apq8016 FirmwareApq8017 Firmware+11 moreFeb 6, 2025 Nov 26, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Crafted Binder Request Causes Heap UAF in MediaServer |
1Qualcomm 203205 Mobile Platform Firmware 215 Mobile Platform Firmware315 5g Iot Modem Firmware+200 moreNov 7, 2024 Nov 4, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption while processing GPU page table switch. |