← Back

Sm6250 Firmware

sm6250_firmware

Vendor: Qualcomm • 507 CVEs

CVEs (507)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Qualcomm
1605g Fixed Wireless Access Platform Firmware
9205 Lte Modem Firmware9205s Modem Firmware+157 more
Oct 9, 2026
Oct 6, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption when non-secure loader rewrites page tables before secure memory initialization.
1Qualcomm
1605g Fixed Wireless Access Platform Firmware
9205 Lte Modem Firmware9205s Modem Firmware+157 more
Oct 9, 2026
Oct 6, 2026
N/A· v4
6.6 MEDIUM· v3
N/A· v2
Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters.
1Qualcomm
3695g Fixed Wireless Access Platform Firmware
Aqt1000 FirmwareAr8031 Firmware+366 more
Sep 22, 2026
Sep 17, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Transient DOS when processing authentication frames with invalid FILS information element header lengths.
1Qualcomm
43Aqt1000 Firmware
Cologne FirmwareFastconnect 6200 Firmware+40 more
Sep 22, 2026
Sep 17, 2026
N/A· v4
7.0 HIGH· v3
N/A· v2
Memory Corruption when multiple threads issue concurrent IOCTL requests to the device control handler due to improper synchronization and race conditions.
1Qualcomm
25Cologne Firmware
Fastconnect 6200 FirmwareFastconnect 6700 Firmware+22 more
Sep 22, 2026
Sep 17, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory Corruption when processing data with large offset and length values exceeds buffer limits during data copy operations.
1Qualcomm
52Aqt1000 Firmware
Cologne FirmwareFastconnect 6200 Firmware+49 more
Oct 23, 2026
Aug 4, 2026
N/A· v4
6.7 MEDIUM· v3
N/A· v2
Memory Corruption when processing registry values with incorrect types using a direct query method.
1Qualcomm
50Aqt1000 Firmware
Cologne FirmwareFastconnect 6200 Firmware+47 more
Jul 22, 2026
Jun 1, 2026
N/A· v4
6.7 MEDIUM· v3
N/A· v2
Memory corruption in diagnostic services due to absence of input validation
1Qualcomm
20Fastconnect 6200 Firmware
Fastconnect 6900 FirmwareFastconnect 7800 Firmware+17 more
Oct 7, 2026
May 4, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption when another driver calls an IOCTL with invalid input/output buffer.
1Qualcomm
51Aqt1000 Firmware
Cologne FirmwareFastconnect 6200 Firmware+48 more
Jun 17, 2026
Apr 6, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver.
1Qualcomm
54Aqt1000 Firmware
Cologne FirmwareFastconnect 6200 Firmware+51 more
Jun 17, 2026
Apr 6, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver.
1Qualcomm
54Aqt1000 Firmware
Cologne FirmwareFastconnect 6200 Firmware+51 more
Jun 17, 2026
Apr 6, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory Corruption when processing auxiliary sensor input/output control commands with insufficient buffer size validation.
1Qualcomm
54Aqt1000 Firmware
Cologne FirmwareFastconnect 6200 Firmware+51 more
Jun 17, 2026
Apr 6, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory Corruption when accessing an output buffer without validating its size during IOCTL processing.
1Qualcomm
52Aqt1000 Firmware
Cologne FirmwareFastconnect 6200 Firmware+49 more
Jun 17, 2026
Apr 6, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory Corruption when retrieving output buffer with insufficient size validation.
1Qualcomm
1485g Fixed Wireless Access Platform Firmware
Ar8035 FirmwareCsra6620 Firmware+145 more
Oct 7, 2026
Apr 6, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Memory corruption when decoding corrupted satellite data files with invalid signature offsets.
1Qualcomm
2025g Fixed Wireless Access Platform Firmware
9206 Lte Modem Firmware9207 Lte Modem Firmware+199 more
Jun 17, 2026
Mar 2, 2026
N/A· v4
7.2 HIGH· v3
N/A· v2
Weak configuration may lead to cryptographic issue when a VoWiFi call is triggered from UE.
1Qualcomm
1225g Fixed Wireless Access Platform Firmware
Ar8035 FirmwareCsra6620 Firmware+119 more
Jun 17, 2026
Mar 2, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Transient DOS when an LTE RLC packet with invalid TB is received by UE.
1Qualcomm
45Aqt1000 Firmware
Fastconnect 6200 FirmwareFastconnect 6700 Firmware+42 more
Jun 17, 2026
Dec 18, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory Corruption when processing IOCTLs for JPEG data without verification.
1Qualcomm
297315 5g Iot Modem Firmware
9205 Lte Modem FirmwareAqt1000 Firmware+294 more
Oct 8, 2026
Oct 9, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption while processing a malformed license file during reboot.
1Qualcomm
317215 Mobile Platform Firmware
315 5g Iot Modem Firmware9205 Lte Modem Firmware+314 more
Oct 8, 2026
Oct 9, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption during PlayReady APP usecase while processing TA commands.
1Qualcomm
225205 Mobile Platform Firmware
215 Mobile Platform FirmwareApq8017 Firmware+222 more
Sep 26, 2026
Sep 24, 2025
N/A· v4
8.2 HIGH· v3
N/A· v2
Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length.