← Back

Snapdragon Auto 5g Modem Rf Firmware

snapdragon_auto_5g_modem-rf_firmware

Vendor: Qualcomm • 223 CVEs

CVEs (223)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Qualcomm
323205 Mobile Platform Firmware
315 5g Iot Modem Firmware9205 Lte Modem Firmware+320 more
Jun 17, 2026
Dec 2, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption when allocating and accessing an entry in an SMEM partition continuously.
1Qualcomm
208315 5g Iot Modem Firmware
Aqt1000 FirmwareAr8035 Firmware+205 more
Jun 17, 2026
Dec 2, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption while Configuring the SMR/S2CR register in Bypass mode.
1Qualcomm
203205 Mobile Platform Firmware
215 Mobile Platform Firmware315 5g Iot Modem Firmware+200 more
Jun 17, 2026
Nov 4, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption while processing GPU page table switch.
1Qualcomm
263205 Mobile Platform Firmware
215 Mobile Platform Firmware315 5g Iot Modem Firmware+260 more
Jun 17, 2026
Nov 4, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption while processing voice packet with arbitrary data received from ADSP.
1Qualcomm
146Ar8035 Firmware
Csra6620 FirmwareCsra6640 Firmware+143 more
Jun 17, 2026
Nov 4, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node.
1Qualcomm
172215 Mobile Platform Firmware
Ar8035 FirmwareCsra6620 Firmware+169 more
Jun 17, 2026
Nov 4, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption while handling session errors from firmware.
1Qualcomm
229315 5g Iot Modem Firmware
Aqt1000 FirmwareAr8035 Firmware+226 more
Jun 17, 2026
Nov 4, 2024
N/A· v4
9.1 CRITICAL· v3
N/A· v2
Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions.
1Qualcomm
62Fastconnect 6700 Firmware
Fastconnect 6800 FirmwareFastconnect 6900 Firmware+59 more
Jun 17, 2026
Oct 7, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption while maintaining memory maps of HLOS memory.
1Qualcomm
131Csr8811 Firmware
Fastconnect 6700 FirmwareFastconnect 7800 Firmware+128 more
Jun 17, 2026
Oct 7, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
Transient DOS while parsing noninheritance IE of Extension element when length of IE is 2 of beacon frame.
1Qualcomm
163Ar8035 Firmware
Csra6620 FirmwareCsra6640 Firmware+160 more
Jun 17, 2026
Sep 2, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption while processing IOCTL call for getting group info.
1Qualcomm
40Ar8035 Firmware
C V2x 9150 FirmwareFastconnect 7800 Firmware+37 more
Jun 17, 2026
Sep 2, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption while processing concurrent IOCTL calls.
1Qualcomm
243215 Mobile Firmware
315 5g Iot FirmwareAqt1000 Firmware+240 more
Jun 17, 2026
Sep 2, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption when two threads try to map and unmap a single node simultaneously.
1Qualcomm
252Ar8035 Firmware
Ar9380 FirmwareCsr8811 Firmware+249 more
Jun 17, 2026
Sep 2, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing or improper.
1Qualcomm
175Ar8035 Firmware
Csra6620 FirmwareCsra6640 Firmware+172 more
Jun 17, 2026
Sep 2, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption when BTFM client sends new messages over Slimbus to ADSP.
1Qualcomm
331315 5g Iot Modem Firmware
9205 Lte Modem FirmwareAqt1000 Firmware+328 more
Jun 17, 2026
Sep 2, 2024
N/A· v4
6.8 MEDIUM· v3
N/A· v2
memory corruption when an invalid firehose patch command is invoked.
1Qualcomm
177Ar8035 Firmware
Fastconnect 6200 FirmwareFastconnect 6700 Firmware+174 more
Jun 17, 2026
Sep 2, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
Transient DOS when processing the non-transmitted BSSID profile sub-elements present within the MBSSID Information Element (IE) of a beacon frame that is received from over-the-air (OTA).
1Qualcomm
159205 Mobile Platform Firmware
315 5g Iot Modem Firmware9205 Lte Modem Firmware+156 more
Jun 17, 2026
Sep 2, 2024
N/A· v4
8.2 HIGH· v3
N/A· v2
Information disclosure while decoding Tracking Area Update Accept or Attach Accept message received from network.
1Qualcomm
136Ar8035 Firmware
Csra6620 FirmwareCsra6640 Firmware+133 more
Jun 17, 2026
Aug 5, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption as fence object may still be accessed in timeline destruct after isync fence is released.
1Qualcomm
151Ar8035 Firmware
Csra6620 FirmwareCsra6640 Firmware+148 more
Jun 17, 2026
Aug 5, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption while creating a fence to wait on timeline events, and simultaneously signal timeline events.
1Qualcomm
123Ar8035 Firmware
Csra6620 FirmwareCsra6640 Firmware+120 more
Jun 17, 2026
Aug 5, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption while allocating memory in HGSL driver.