← Back

Snapdragon Auto 5g Modem Rf Firmware

snapdragon_auto_5g_modem-rf_firmware

Vendor: Qualcomm • 223 CVEs

CVEs (223)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Qualcomm
13C V2x 9150 Firmware
Qcs410 FirmwareQcs610 Firmware+10 more
Jun 17, 2026
Apr 1, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
Transient DOS while decoding message of size that exceeds the available system memory.
1Qualcomm
6C V2x 9150 Firmware
Qca6584au FirmwareQca6698aq Firmware+3 more
Jun 17, 2026
Apr 1, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
Transient DOS while decoding an ASN.1 OER message containing a SEQUENCE of unknown extensions.
1Qualcomm
97315 5g Iot Modem Firmware
Ar8035 FirmwareFastconnect 6200 Firmware+94 more
Jun 17, 2026
Apr 1, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
Transient DOS while processing DL NAS TRANSPORT message with payload length 0.
1Qualcomm
97315 5g Iot Modem Firmware
Ar8035 FirmwareFastconnect 6200 Firmware+94 more
Jun 17, 2026
Apr 1, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
Transient DOS while processing SMS container of non-standard size received in DL NAS transport in NR.
1Qualcomm
281215 Mobile Firmware
315 5g Iot FirmwareApq8017 Firmware+278 more
Jun 17, 2026
Apr 1, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption while processing finish_sign command to pass a rsp buffer.
1Qualcomm
295215 Mobile Firmware
315 5g Iot Firmware9205 Lte Firmware+292 more
Jun 17, 2026
Apr 1, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption in SPS Application while requesting for public key in sorter TA.
1Qualcomm
118Ar8035 Firmware
Csra6620 FirmwareCsra6640 Firmware+115 more
Jun 17, 2026
Mar 4, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption while invoking IOCTLs calls in Automotive Multimedia.
1Qualcomm
118Ar8035 Firmware
Csra6620 FirmwareCsra6640 Firmware+115 more
Jun 17, 2026
Mar 4, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption while invoking HGSL IOCTL context create.
1Qualcomm
95315 5g Iot Modem Firmware
Ar8035 FirmwareFastconnect 6200 Firmware+92 more
Jun 17, 2026
Mar 4, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
Transient DOS while processing PDU Release command with a parameter PDU ID out of range.
1Qualcomm
95315 5g Iot Modem Firmware
Ar8035 FirmwareFastconnect 6200 Firmware+92 more
Jun 17, 2026
Mar 4, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
Transient DOS while processing DL NAS Transport message, as specified in 3GPP 24.501 v16.
1Qualcomm
95315 5g Iot Modem Firmware
Ar8035 FirmwareFastconnect 6200 Firmware+92 more
Jun 17, 2026
Mar 4, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
Transient DOS while processing multiple payload container type with incorrect container length received in DL NAS transport OTA in NR.
1Qualcomm
150315 5g Iot Modem Firmware
Aqt1000 FirmwareAr8035 Firmware+147 more
Jun 17, 2026
Mar 4, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
Transient DOS while processing multiple IKEV2 Informational Request to device from IPSEC server with different identifiers.
1Qualcomm
307205 Mobile Firmware
215 Mobile Firmware315 5g Iot Modem Firmware+304 more
Jun 17, 2026
Mar 4, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption in Audio while processing RT proxy port register driver.
1Qualcomm
333315 5g Iot Modem Firmware
Aqt1000 FirmwareAr8031 Firmware+330 more
Jun 17, 2026
Mar 4, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption in Core Services while executing the command for removing a single event listener.
1Qualcomm
303315 5g Iot Modem Firmware
Aqt1000 FirmwareAr8031 Firmware+300 more
Jun 17, 2026
Feb 6, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
Transient DOS while parse fils IE with length equal to 1.
1Qualcomm
232315 5g Iot Modem Firmware
Aqt1000 FirmwareAr8035 Firmware+229 more
Jun 17, 2026
Feb 6, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
Transient DOS in WLAN Firmware when the length of received beacon is less than length of ieee802.11 beacon frame.
1Qualcomm
280Aqt1000 Firmware
Ar8035 FirmwareAr9380 Firmware+277 more
Jun 17, 2026
Feb 6, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
Transient DOS while key unwrapping process, when the given encrypted key is empty or NULL.
1Qualcomm
261315 5g Iot Modem Firmware
Apq8017 FirmwareAqt1000 Firmware+258 more
Jun 17, 2026
Feb 6, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may point to address in the middle of ring element.
1Qualcomm
239315 5g Iot Modem Firmware
9205 Lte Modem FirmwareAqt1000 Firmware+236 more
Jun 17, 2026
Feb 6, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption in Core while processing control functions.
1Qualcomm
95315 5g Iot Modem Firmware
Ar8035 FirmwareFastconnect 6200 Firmware+92 more
Jun 17, 2026
Feb 6, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
Transient DOS in Multi-Mode Call Processor while processing UE policy container.