← Back

Snapdragon X70 Modem Rf System Firmware

snapdragon_x70_modem-rf_system_firmware

Vendor: Qualcomm • 73 CVEs

CVEs (73)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Qualcomm
333315 5g Iot Modem Firmware
Aqt1000 FirmwareAr8031 Firmware+330 more
Jun 17, 2026
Mar 4, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption in Core Services while executing the command for removing a single event listener.
1Qualcomm
147Aqt1000 Firmware
Ar8035 FirmwareFastconnect 6200 Firmware+144 more
Jun 17, 2026
Feb 6, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption in Core when updating rollback version for TA and OTA feature is enabled.
1Qualcomm
239315 5g Iot Modem Firmware
9205 Lte Modem FirmwareAqt1000 Firmware+236 more
Jun 17, 2026
Feb 6, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption in Core while processing control functions.
1Qualcomm
45Ar8035 Firmware
Fastconnect 6700 FirmwareFastconnect 6900 Firmware+42 more
Jun 17, 2026
Feb 6, 2024
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Transient DOS in Core when DDR memory check is called while DDR is not initialized.
1Qualcomm
45Ar8035 Firmware
Fastconnect 6700 FirmwareFastconnect 6900 Firmware+42 more
Jun 17, 2026
Feb 6, 2024
N/A· v4
9.1 CRITICAL· v3
N/A· v2
Information disclosure in Modem while processing SIB5.
1Qualcomm
95315 5g Iot Modem Firmware
Ar8035 FirmwareFastconnect 6200 Firmware+92 more
Jun 17, 2026
Feb 6, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
Transient DOS in Multi-Mode Call Processor while processing UE policy container.
1Qualcomm
95315 5g Iot Modem Firmware
Ar8035 FirmwareFastconnect 6200 Firmware+92 more
Jun 17, 2026
Feb 6, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
Transient DOS in Multi-Mode Call Processor due to UE failure because of heap leakage.
1Qualcomm
48Ar8035 Firmware
Fastconnect 6900 FirmwareFastconnect 7800 Firmware+45 more
Jun 17, 2026
Feb 6, 2024
N/A· v4
7.0 HIGH· v3
N/A· v2
Memory corruption in Trusted Execution Environment while deinitializing an object used for license validation.
1Qualcomm
118Snapdragon 425 Mobile Platform Firmware
Snapdragon 427 Mobile Platform FirmwareSnapdragon 429 Mobile Platform Firmware+115 more
Jun 17, 2026
Jan 2, 2024
N/A· v4
7.0 HIGH· v3
N/A· v2
The session index variable in PCM host voice audio driver initialized before PCM open, accessed during event callback from ADSP and reset during PCM close may lead to race condition between event callback - PCM close and...Show more
The session index variable in PCM host voice audio driver initialized before PCM open, accessed during event callback from ADSP and reset during PCM close may lead to race condition between event callback - PCM close and reset session index causing memory corruption.Show less
1Qualcomm
139315 5g Iot Modem Firmware
Aqt1000 FirmwareAr8035 Firmware+136 more
Jun 17, 2026
Jan 2, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
Transient DOS in Data Modem during DTLS handshake.
1Qualcomm
139315 5g Iot Modem Firmware
Aqt1000 FirmwareAr8035 Firmware+136 more
Jun 17, 2026
Jan 2, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption while receiving a message in Bus Socket Transport Server.
1Qualcomm
259315 5g Iot Modem Firmware
9205 Lte Modem Firmware9206 Lte Modem Firmware+256 more
Jun 17, 2026
Jan 2, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption in Audio during playback with speaker protection.
1Qualcomm
293315 5g Iot Modem Firmware
9205 Lte Modem Firmware9206 Lte Modem Firmware+290 more
Jun 17, 2026
Jan 2, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption in HLOS while running playready use-case.
1Qualcomm
24Ar8035 Firmware
Fastconnect 6700 FirmwareFastconnect 6900 Firmware+21 more
Jun 17, 2026
Jan 2, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Memory corruption in Data Modem when a non-standard SDP body, during a VOLTE call.
1Qualcomm
37Ar8035 Firmware
Fastconnect 6700Fastconnect 6900 Firmware+34 more
Jun 17, 2026
Jan 2, 2024
N/A· v4
6.8 MEDIUM· v3
N/A· v2
Information disclosure in Core services while processing a Diag command.
1Qualcomm
89315 5g Iot Modem Firmware
Ar8035 FirmwareQca6390 Firmware+86 more
Jun 17, 2026
Dec 5, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Transient DOS in Data modem while handling TLB control messages from the Network.
1Qualcomm
58Ar8035 Firmware
Qca6391 FirmwareQca8081 Firmware+55 more
Jun 17, 2026
Dec 5, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Transient DOS in Modem when a Beam switch request is made with a non-configured BWP.
1Qualcomm
74315 5g Iot Modem Firmware
Ar8035 FirmwareQca6390 Firmware+71 more
Jun 17, 2026
Dec 5, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Transient DOS in Modem after RRC Setup message is received.
1Qualcomm
262315 5g Iot Modem Firmware
8098 Firmware8998 Firmware+259 more
Jun 17, 2026
Dec 5, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption while using the UIM diag command to get the operators name.
1Qualcomm
307315 5g Iot Modem Firmware
9205 Lte Modem FirmwareAqt1000 Firmware+304 more
Jun 17, 2026
Dec 5, 2023
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Information disclosure when the trusted application metadata symbol addresses are accessed while loading an ELF in TEE.