CVEs (47)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Qualcomm 196215 Firmware Ar8035 FirmwareCsr8811 Firmware+193 moreJun 17, 2026 Jul 4, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory Corruption in WLAN HOST while processing WLAN FW request to allocate memory. |
1Qualcomm 155205 Firmware 215 Firmware315 5g Firmware+152 moreJun 17, 2026 Jul 4, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network. |
1Qualcomm 207205 Firmware 215 Firmware315 5g Firmware+204 moreJun 17, 2026 Jul 4, 2023 N/A· v4 6.8 MEDIUM· v3 N/A· v2 Memory Corruption in Modem due to double free while parsing the PKCS15 sim files. |
1Qualcomm 162Apq8009 Firmware Apq8009w FirmwareApq8017 Firmware+159 moreJun 17, 2026 Mar 10, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Memory corruption in Bluetooth HOST while processing the AVRC_PDU_GET_PLAYER_APP_VALUE_TEXT AVRCP response. |
1Qualcomm 71Csr8811 Firmware Ipq8070a FirmwareIpq8071a Firmware+68 moreJun 17, 2026 Mar 10, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS due to buffer over-read in WLAN while sending a packet to device. |
1Qualcomm 284Apq8009 Firmware Apq8017 FirmwareApq8076 Firmware+281 moreJun 17, 2026 Mar 10, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID message. |
1Qualcomm 189Aqt1000 Firmware Ar8031 FirmwareAr8035 Firmware+186 moreJun 17, 2026 Mar 10, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in WLAN due to integer overflow to buffer overflow in WLAN during initialization phase. |
1Qualcomm 159Apq8009 Firmware Apq8009w FirmwareApq8052 Firmware+156 moreJun 17, 2026 Mar 10, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms. |
1Qualcomm 123Aqt1000 Firmware Ar8035 FirmwareCsra6620 Firmware+120 moreJun 17, 2026 Mar 10, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption due to buffer copy without checking the size of input in HLOS when input message size is larger than the buffer capacity. |
1Qualcomm 49Ar8035 Firmware Qca6390 FirmwareQca6391 Firmware+46 moreJun 17, 2026 Mar 10, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS in modem due to reachable assertion. |
1Qualcomm 140Aqt1000 Firmware Ar8031 FirmwareAr8035 Firmware+137 moreJun 17, 2026 Mar 10, 2023 N/A· v4 7.0 HIGH· v3 N/A· v2 Memory corruption in Core due to time-of-check time-of-use race condition during dump collection in trust zone. |
1Qualcomm 65Ar8035 Firmware Qca6390 FirmwareQca6391 Firmware+62 moreJun 17, 2026 Mar 10, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Memory corruption due to improper validation of array index in Multi-mode call processor. |
1Qualcomm 64Aqt1000 Firmware Ar8035 FirmwareQca6390 Firmware+61 moreJun 17, 2026 Mar 10, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS due to reachable assertion in Modem while processing SIB1 Message. |
1Qualcomm 65Ar8035 Firmware Qca6390 FirmwareQca6391 Firmware+62 moreJun 17, 2026 Mar 10, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS due to reachable assertion in modem when network repeatedly sent invalid message container for NR to LTE handover. |
1Qualcomm 39Ar8035 Firmware Qca6391 FirmwareQca8081 Firmware+36 moreJun 17, 2026 Mar 10, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS due to reachable assertion in modem during MIB reception and SIB timeout |
1Qualcomm 157Aqt1000 Firmware Ar8031 FirmwareAr8035 Firmware+154 moreJun 17, 2026 Mar 10, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption due to improper authentication in Qualcomm IPC while loading unsigned lib in audio PD. |
1Qualcomm 68Ar8035 Firmware Qca6174a FirmwareQca6310 Firmware+65 moreJun 17, 2026 Mar 10, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in modem due to use of out of range pointer offset while processing qmi msg |
1Qualcomm 201Apq8009 Firmware Apq8009w FirmwareApq8017 Firmware+198 moreJun 17, 2026 Mar 10, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in modem due to integer overflow to buffer overflow while handling APDU response |
1Qualcomm 208Apq8009 Firmware Apq8009w FirmwareApq8017 Firmware+205 moreJun 17, 2026 Mar 10, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM |
1Qualcomm 238Apq8009 Firmware Apq8017 FirmwareApq8076 Firmware+235 moreJun 17, 2026 Mar 10, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in WLAN HAL while arbitrary value is passed in WMI UTF command payload. |