CVEs (81)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Qualcomm 183215 Mobile Firmware 5g Fixed Wireless Access FirmwareAr8031 Firmware+180 moreMay 6, 2026 May 4, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified. |
1Qualcomm 2315g Fixed Wireless Access Platform Firmware Apq8098 FirmwareAr8031 Firmware+228 moreMar 4, 2026 Mar 2, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption while using alignments for memory allocation. |
1Qualcomm 165Ar8031 Firmware Ar8035 FirmwareCsra6620 Firmware+162 moreMar 5, 2026 Mar 2, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory Corruption while invoking IOCTL calls when concurrent access to shared buffer occurs. |
1Qualcomm 2005g Fixed Wireless Access Platform Firmware 9206 Lte Modem Firmware9207 Lte Modem Firmware+197 moreMar 4, 2026 Mar 2, 2026 N/A· v4 7.2 HIGH· v3 N/A· v2 Weak configuration may lead to cryptographic issue when a VoWiFi call is triggered from UE. |
1Qualcomm 1735g Fixed Wireless Access Platform Firmware Ar8031 FirmwareAr8035 Firmware+170 moreMar 5, 2026 Mar 2, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory Corruption when concurrent access to shared buffer occurs due to improper synchronization between assignment and deallocation of buffer resources. |
1Qualcomm 165Ar8031 Firmware Ar8035 FirmwareCsra6620 Firmware+162 moreMar 4, 2026 Mar 2, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory Corruption when concurrent access to shared buffer occurs during IOCTL calls. |
1Qualcomm 164Ar8031 Firmware Ar8035 FirmwareCsra6620 Firmware+161 moreMar 4, 2026 Mar 2, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption while handling different IOCTL calls from the user-space simultaneously. |
1Qualcomm 173Ar8035 Firmware Csra6620 FirmwareCsra6640 Firmware+170 moreJan 27, 2026 Jan 7, 2026 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Information disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a session ID. |
1Qualcomm 237Aqt1000 Firmware Ar8031 FirmwareAr8035 Firmware+234 moreJan 28, 2026 Jan 7, 2026 N/A· v4 6.6 MEDIUM· v3 N/A· v2 Memory corruption while handling buffer mapping operations in the cryptographic driver. |
1Qualcomm 297Ar8031 Firmware Ar8035 FirmwareCsr8811 Firmware+294 moreJan 28, 2026 Jan 7, 2026 N/A· v4 6.1 MEDIUM· v3 N/A· v2 Information disclosure while processing a firmware event. |
1Qualcomm 221Ar8031 Firmware Ar8035 FirmwareC V2x 9150 Firmware+218 moreJan 28, 2026 Jan 7, 2026 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Transient DOS while parsing video packets received from the video firmware. |
1Qualcomm 2139206 Lte Modem Firmware Apq8017 FirmwareAqt1000 Firmware+210 moreFeb 10, 2026 Dec 18, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption while processing MFC channel configuration during music playback. |
1Qualcomm 317215 Mobile Platform Firmware 315 5g Iot Modem Firmware9205 Lte Modem Firmware+314 moreNov 5, 2025 Oct 9, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption during PlayReady APP usecase while processing TA commands. |
1Qualcomm 287315 5g Iot Modem Firmware 9205 Lte Modem Firmware9206 Lte Modem Firmware+284 moreDec 2, 2025 Sep 24, 2025 N/A· v4 7.1 HIGH· v3 N/A· v2 Cryptographic issue while performing RSA PKCS padding decoding. |
1Qualcomm 152315 5g Iot Modem Firmware Apq8064au FirmwareAr8035 Firmware+149 moreNov 28, 2025 Aug 6, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption while handling client exceptions, allowing unauthorized channel access. |
1Qualcomm 337215 Mobile Firmware 315 5g Iot Modem FirmwareAqt1000 Firmware+334 moreSep 25, 2025 Jul 8, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption while processing video packets received from video firmware. |
1Qualcomm 185315 5g Iot Modem Firmware 9206 Lte Modem FirmwareApq8017 Firmware+182 moreAug 11, 2025 Jul 8, 2025 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS while processing received beacon frame. |
1Qualcomm 180315 5g Iot Firmware Apq8017 FirmwareApq8064au Firmware+177 moreFeb 10, 2026 Jul 8, 2025 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS may occur while processing malformed length field in SSID IEs. |
1Qualcomm 146Ar8035 Firmware Csra6620 FirmwareCsra6640 Firmware+143 moreAug 11, 2025 May 6, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption while reading response from FW, when buffer size is changed by FW while driver is using this size to write null character at the end of buffer. |
1Qualcomm 103215 Mobile Firmware Csra6620 FirmwareCsra6640 Firmware+100 moreAug 11, 2025 May 6, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption while reading the FW response from the shared queue. |