CVEs (83)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Qualcomm 83Ar8035 Firmware C V2x 9150 FirmwareFastconnect 6700 Firmware+80 moreJun 17, 2026 Apr 1, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Information disclosure when VI calibration state set by ADSP is greater than MAX_FBSP_STATE in the response payload to AFE calibration command. |
1Qualcomm 97315 5g Iot Modem Firmware Ar8035 FirmwareFastconnect 6200 Firmware+94 moreJun 17, 2026 Apr 1, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS while processing DL NAS TRANSPORT message with payload length 0. |
1Qualcomm 48Ar8035 Firmware Fastconnect 6700 FirmwareFastconnect 6900 Firmware+45 moreJun 17, 2026 Apr 1, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS while processing DL NAS Transport message when message ID is not defined in the 3GPP specification. |
1Qualcomm 97315 5g Iot Modem Firmware Ar8035 FirmwareFastconnect 6200 Firmware+94 moreJun 17, 2026 Apr 1, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS while processing SMS container of non-standard size received in DL NAS transport in NR. |
1Qualcomm 281215 Mobile Firmware 315 5g Iot FirmwareApq8017 Firmware+278 moreJun 17, 2026 Apr 1, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption while processing finish_sign command to pass a rsp buffer. |
1Qualcomm 295215 Mobile Firmware 315 5g Iot Firmware9205 Lte Firmware+292 moreJun 17, 2026 Apr 1, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in SPS Application while requesting for public key in sorter TA. |
1Qualcomm 130Ar8035 Firmware Csr8811 FirmwareFastconnect 6900 Firmware+127 moreJun 17, 2026 Mar 4, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Memory corruption while parsing beacon/probe response frame when AP sends more supported links in MLIE. |
1Qualcomm 148Ar8035 Firmware Csr8811 FirmwareFastconnect 6900 Firmware+145 moreJun 17, 2026 Mar 4, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Memory corruption while processing MBSSID beacon containing several subelement IE. |
1Qualcomm 130Ar8035 Firmware Csra6620 FirmwareCsra6640 Firmware+127 moreJun 17, 2026 Mar 4, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption while processing a QMI request for allocating memory from a DHMS supported subsystem. |
1Qualcomm 136Ar8035 Firmware Csr8811 FirmwareFastconnect 6700 Firmware+133 moreJun 17, 2026 Mar 4, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption while processing TPC target power table in FTM TPC. |
1Qualcomm 118Ar8035 Firmware Csra6620 FirmwareCsra6640 Firmware+115 moreJun 17, 2026 Mar 4, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption while invoking IOCTLs calls in Automotive Multimedia. |
1Qualcomm 118Ar8035 Firmware Csra6620 FirmwareCsra6640 Firmware+115 moreJun 17, 2026 Mar 4, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption while invoking HGSL IOCTL context create. |
1Qualcomm 135Ar8035 Firmware Csr8811 FirmwareFastconnect 6800 Firmware+132 moreJun 17, 2026 Mar 4, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS while processing an improperly formatted 802.11az Fine Time Measurement protocol frame. |
1Qualcomm 149Ar8035 Firmware Ar9380 FirmwareCsr8811 Firmware+146 moreJun 17, 2026 Mar 4, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS in WLAN Host and Firmware when large number of open authentication frames are sent with an invalid transaction sequence number. |
1Qualcomm 95315 5g Iot Modem Firmware Ar8035 FirmwareFastconnect 6200 Firmware+92 moreJun 17, 2026 Mar 4, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS while processing PDU Release command with a parameter PDU ID out of range. |
1Qualcomm 47Ar8035 Firmware Fastconnect 6700 FirmwareFastconnect 6900 Firmware+44 moreJun 17, 2026 Mar 4, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS while processing CAG info IE received from NW. |
1Qualcomm 95315 5g Iot Modem Firmware Ar8035 FirmwareFastconnect 6200 Firmware+92 moreJun 17, 2026 Mar 4, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS while processing DL NAS Transport message, as specified in 3GPP 24.501 v16. |
1Qualcomm 95315 5g Iot Modem Firmware Ar8035 FirmwareFastconnect 6200 Firmware+92 moreJun 17, 2026 Mar 4, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS while processing multiple payload container type with incorrect container length received in DL NAS transport OTA in NR. |
1Qualcomm 51Ar8035 Firmware Fastconnect 6800 FirmwareFastconnect 6900 Firmware+48 moreJun 17, 2026 Mar 4, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Transient DOS while processing channel information for speaker protection v2 module in ADSP. |
1Qualcomm 150315 5g Iot Modem Firmware Aqt1000 FirmwareAr8035 Firmware+147 moreJun 17, 2026 Mar 4, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS while processing multiple IKEV2 Informational Request to device from IPSEC server with different identifiers. |