Snapdragon X35 5g Modem Rf System Firmware
snapdragon_x35_5g_modem-rf_system_firmware
Vendor: Qualcomm • 100 CVEs
CVEs (100)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Qualcomm 287315 5g Iot Modem Firmware 9205 Lte Modem Firmware9206 Lte Modem Firmware+284 moreSep 26, 2026 Sep 24, 2025 N/A· v4 7.1 HIGH· v3 N/A· v2 Cryptographic issue while performing RSA PKCS padding decoding. |
1Qualcomm 249315 5g Iot Modem Firmware Aqt1000 FirmwareAr8031 Firmware+246 moreJun 17, 2026 Sep 24, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption while performing private key encryption in trusted application. |
1Qualcomm 370315 5g Iot Modem Firmware Aqt1000 FirmwareAr8031 Firmware+367 moreJun 17, 2026 Aug 6, 2025 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS while processing an ANQP message. |
1Qualcomm 347315 5g Iot Modem Firmware 9205 Lte Modem FirmwareAqt1000 Firmware+344 moreJun 17, 2026 Aug 6, 2025 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Information disclosure while processing the hash segment in an MBN file. |
1Qualcomm 340315 5g Iot Modem Firmware 9205 Lte Modem FirmwareAqt1000 Firmware+337 moreJun 17, 2026 Aug 6, 2025 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Information disclosure while reading data from an image using specified offset and size parameters. |
1Qualcomm 80315 5g Iot Modem Firmware Ar8035 FirmwareFastconnect 6200 Firmware+77 moreJun 17, 2026 Aug 6, 2025 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS while processing a random-access response (RAR) with an invalid PDU length on LTE network. |
1Qualcomm 191Aqt1000 Firmware Ar8035 FirmwareFastconnect 6200 Firmware+188 moreJun 17, 2026 Jun 3, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption may occur while attaching VM when the HLOS retains access to VM. |
1Qualcomm 267315 5g Iot Modem Firmware Aqt1000 FirmwareAr8035 Firmware+264 moreJun 17, 2026 Apr 7, 2025 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS may occur while parsing SSID in action frames. |
1Qualcomm 223315 5g Iot Modem Firmware Apq8017 FirmwareApq8064au Firmware+220 moreJun 17, 2026 Apr 7, 2025 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS while connecting STA to AP and initiating ADD TS request from AP to establish TSpec session. |
1Qualcomm 699206 Lte Modem Firmware Apq8017 FirmwareAr8031 Firmware+66 moreJun 17, 2026 Apr 7, 2025 N/A· v4 7.5 HIGH· v3 N/A· v2 Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request from the AP to establish a TSpec session. |
1Qualcomm 145Ar8035 Firmware Fastconnect 6200 FirmwareFastconnect 6700 Firmware+142 moreJun 17, 2026 Apr 7, 2025 N/A· v4 6.7 MEDIUM· v3 N/A· v2 Memory corruption while processing multiple IOCTL calls from HLOS to DSP. |
1Qualcomm 60Ar8035 Firmware Fastconnect 6700 FirmwareFastconnect 6900 Firmware+57 moreJun 17, 2026 Apr 7, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption can occur when TME processes addresses from TZ and MPSS requests without proper validation. |
1Qualcomm 240Aqt1000 Firmware Ar8035 FirmwareCsra6620 Firmware+237 moreJun 17, 2026 Apr 7, 2025 N/A· v4 6.2 MEDIUM· v3 N/A· v2 Cryptographic issue occurs during PIN/password verification using Gatekeeper, where RPMB writes can be dropped on verification failure, potentially leading to a user throttling bypass. |
1Qualcomm 158Ar8035 Firmware Fastconnect 6700 FirmwareFastconnect 6800 Firmware+155 moreJun 17, 2026 Apr 7, 2025 N/A· v4 7.7 HIGH· v3 N/A· v2 Information disclosure while creating MQ channels. |
1Qualcomm 164Ar8035 Firmware Fastconnect 6200 FirmwareFastconnect 6700 Firmware+161 moreJun 17, 2026 Apr 7, 2025 N/A· v4 7.1 HIGH· v3 N/A· v2 Cryptographic issues while generating an asymmetric key pair for RKP use cases. |
1Qualcomm 308315 5g Iot Modem Firmware 9205 Lte Modem FirmwareAqt1000 Firmware+305 moreJun 17, 2026 Apr 7, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 There may be information disclosure during memory re-allocation in TZ Secure OS. |
1Qualcomm 189Aqt1000 Firmware Ar8035 FirmwareFastconnect 6200 Firmware+186 moreJun 17, 2026 Apr 7, 2025 N/A· v4 7.5 HIGH· v3 N/A· v2 Memory corruption while assigning memory from the source DDR memory(HLOS) to ADSP. |
1Qualcomm 323205 Mobile Platform Firmware 315 5g Iot Modem Firmware9205 Lte Modem Firmware+320 moreJun 17, 2026 Dec 2, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption when allocating and accessing an entry in an SMEM partition continuously. |
1Qualcomm 208315 5g Iot Modem Firmware Aqt1000 FirmwareAr8035 Firmware+205 moreJun 17, 2026 Dec 2, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption while Configuring the SMR/S2CR register in Bypass mode. |
1Qualcomm 117Ar8035 Firmware Fastconnect 6200 FirmwareFastconnect 6700 Firmware+114 moreJun 17, 2026 Nov 4, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption during GNSS HAL process initialization. |