Snapdragon X75 5g Modem Rf System Firmware
snapdragon_x75_5g_modem-rf_system_firmware
Vendor: Qualcomm • 206 CVEs
CVEs (206)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Qualcomm 45Ar8035 Firmware Fastconnect 6700 FirmwareFastconnect 6900 Firmware+42 moreNov 21, 2024 Feb 6, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Transient DOS in Core when DDR memory check is called while DDR is not initialized. |
1Qualcomm 45Ar8035 Firmware Fastconnect 6700 FirmwareFastconnect 6900 Firmware+42 moreNov 21, 2024 Feb 6, 2024 N/A· v4 9.1 CRITICAL· v3 N/A· v2 Information disclosure in Modem while processing SIB5. |
1Qualcomm 95315 5g Iot Modem Firmware Ar8035 FirmwareFastconnect 6200 Firmware+92 moreAug 11, 2025 Feb 6, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS in Multi-Mode Call Processor while processing UE policy container. |
1Qualcomm 95315 5g Iot Modem Firmware Ar8035 FirmwareFastconnect 6200 Firmware+92 moreAug 11, 2025 Feb 6, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS in Multi-Mode Call Processor due to UE failure because of heap leakage. |
1Qualcomm 81Ar8035 Firmware Fastconnect 6200 FirmwareFastconnect 6700 Firmware+78 moreAug 11, 2025 Jan 2, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption while invoking IOCTLs calls from user space for internal mem MAP and internal mem UNMAP. |
1Qualcomm 350315 5g Iot Modem Firmware 9206 Lte Modem FirmwareApq8017 Firmware+347 moreAug 11, 2025 Jan 2, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains `IPPROTO_NONE` as the next header. |
1Qualcomm 227315 5g Iot Modem Firmware 9206 Lte Modem FirmwareApq8017 Firmware+224 moreAug 11, 2025 Jan 2, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in Audio when memory map command is executed consecutively in ADSP. |
1Qualcomm 130Ar8035 Firmware Csra6620 FirmwareCsra6640 Firmware+127 moreAug 11, 2025 Jan 2, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption while processing Listen Sound Model client payload buffer when there is a request for Listen Sound session get parameter from ST HAL. |
1Qualcomm 136Ar8035 Firmware Csra6620 FirmwareCsra6640 Firmware+133 moreAug 11, 2025 Jan 2, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption when HLOS allocates the response payload buffer to copy the data received from ADSP in response to AVCS_LOAD_MODULE command. |
1Qualcomm 102Ar8035 Firmware Ar9380 FirmwareCsr8811 Firmware+99 moreNov 21, 2024 Jan 2, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS while parsing ieee80211_parse_mscs_ie in WIN WLAN driver. |
1Qualcomm 304315 5g Iot Modem Firmware Aqt1000 FirmwareAr8031 Firmware+301 moreAug 11, 2025 Jan 2, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS while processing a WMI P2P listen start command (0xD00A) sent from host. |
1Qualcomm 257315 5g Iot Modem Firmware Aqt1000 FirmwareAr8031 Firmware+254 moreAug 11, 2025 Dec 5, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS while parsing WPA IES, when it is passed with length more than expected size. |
1Qualcomm 121Ar8035 Firmware Csr8811 FirmwareFastconnect 6900 Firmware+118 moreNov 21, 2024 Dec 5, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS in WLAN Firmware while processing a FTMR frame. |
1Qualcomm 223315 5g Iot Modem Firmware Aqt1000 FirmwareAr8035 Firmware+220 moreAug 11, 2025 Dec 5, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS when processing a NULL buffer while parsing WLAN vdev. |
1Qualcomm 300315 5g Iot Modem Firmware Aqt1000 FirmwareAr8031 Firmware+297 moreAug 11, 2025 Dec 5, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption when processing cmd parameters while parsing vdev. |
1Qualcomm 117Apq5053 Aa Firmware Ar8035 FirmwareCsra6620 Firmware+114 moreAug 11, 2025 Dec 5, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in Core while processing RX intent request. |
1Qualcomm 115Ar8035 Firmware Ar9380 FirmwareCsr8811 Firmware+112 moreNov 21, 2024 Dec 5, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Memory corruption in WLAN Host while processing RRM beacon on the AP. |
1Qualcomm 115Ar8035 Firmware Ar9380 FirmwareCsr8811 Firmware+112 moreNov 21, 2024 Dec 5, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Memory corruption while sending an Assoc Request having BTM Query or BTM Response containing MBO IE. |
1Qualcomm 148Aqt1000 Firmware Ar8035 FirmwareCsr8811 Firmware+145 moreNov 21, 2024 Dec 5, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS while converting TWT (Target Wake Time) frame parameters in the OTA broadcast. |
1Qualcomm 365315 5g Iot Modem Firmware 8098 Firmware8998 Firmware+362 moreAug 11, 2025 Dec 5, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management frame. |