← Back

Snapdragon Xr2 5g Firmware

snapdragon_xr2_5g_firmware

Vendor: Qualcomm • 97 CVEs

CVEs (97)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Qualcomm
97315 5g Iot Modem Firmware
Ar8035 FirmwareFastconnect 6200 Firmware+94 more
Jun 17, 2026
Apr 1, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
Transient DOS while processing DL NAS TRANSPORT message with payload length 0.
1Qualcomm
97315 5g Iot Modem Firmware
Ar8035 FirmwareFastconnect 6200 Firmware+94 more
Jun 17, 2026
Apr 1, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
Transient DOS while processing SMS container of non-standard size received in DL NAS transport in NR.
1Qualcomm
281215 Mobile Firmware
315 5g Iot FirmwareApq8017 Firmware+278 more
Jun 17, 2026
Apr 1, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption while processing finish_sign command to pass a rsp buffer.
1Qualcomm
295215 Mobile Firmware
315 5g Iot Firmware9205 Lte Firmware+292 more
Jun 17, 2026
Apr 1, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption in SPS Application while requesting for public key in sorter TA.
1Qualcomm
136Ar8035 Firmware
Csr8811 FirmwareFastconnect 6700 Firmware+133 more
Jun 17, 2026
Mar 4, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption while processing TPC target power table in FTM TPC.
1Qualcomm
136Aqt1000 Firmware
Fastconnect 6200 FirmwareFastconnect 6700 Firmware+133 more
Jun 17, 2026
Mar 4, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Memory corruption while parsing qcp clip with invalid chunk data size.
1Qualcomm
135Ar8035 Firmware
Csr8811 FirmwareFastconnect 6800 Firmware+132 more
Jun 17, 2026
Mar 4, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
Transient DOS while processing an improperly formatted 802.11az Fine Time Measurement protocol frame.
1Qualcomm
95315 5g Iot Modem Firmware
Ar8035 FirmwareFastconnect 6200 Firmware+92 more
Jun 17, 2026
Mar 4, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
Transient DOS while processing PDU Release command with a parameter PDU ID out of range.
1Qualcomm
95315 5g Iot Modem Firmware
Ar8035 FirmwareFastconnect 6200 Firmware+92 more
Jun 17, 2026
Mar 4, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
Transient DOS while processing DL NAS Transport message, as specified in 3GPP 24.501 v16.
1Qualcomm
95315 5g Iot Modem Firmware
Ar8035 FirmwareFastconnect 6200 Firmware+92 more
Jun 17, 2026
Mar 4, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
Transient DOS while processing multiple payload container type with incorrect container length received in DL NAS transport OTA in NR.
1Qualcomm
51Ar8035 Firmware
Fastconnect 6800 FirmwareFastconnect 6900 Firmware+48 more
Jun 17, 2026
Mar 4, 2024
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Transient DOS while processing channel information for speaker protection v2 module in ADSP.
1Qualcomm
150315 5g Iot Modem Firmware
Aqt1000 FirmwareAr8035 Firmware+147 more
Jun 17, 2026
Mar 4, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
Transient DOS while processing multiple IKEV2 Informational Request to device from IPSEC server with different identifiers.
1Qualcomm
307205 Mobile Firmware
215 Mobile Firmware315 5g Iot Modem Firmware+304 more
Jun 17, 2026
Mar 4, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption in Audio while processing RT proxy port register driver.
1Qualcomm
333315 5g Iot Modem Firmware
Aqt1000 FirmwareAr8031 Firmware+330 more
Jun 17, 2026
Mar 4, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption in Core Services while executing the command for removing a single event listener.
1Qualcomm
163Apq8064au Firmware
Aqt1000 FirmwareAr8035 Firmware+160 more
Jun 17, 2026
Sep 5, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption in Graphics while processing user packets for command submission.
1Qualcomm
190315 5g Firmware
Aqt1000 FirmwareAr8035 Firmware+187 more
Jun 17, 2026
Sep 5, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Transient DOS in WLAN Firmware while interpreting MBSSID IE of a received beacon frame.
1Qualcomm
25Fastconnect 6800 Firmware
Fastconnect 6900 FirmwareFastconnect 7800 Firmware+22 more
Jun 17, 2026
Sep 5, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Memory corruption in WLAN Firmware while parsing receieved GTK Keys in GTK KDE.
1Qualcomm
195315 5g Iot Firmware
Aqt1000 FirmwareAr8035 Firmware+192 more
Jun 17, 2026
Sep 5, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption in WLAN HAL while parsing WMI command parameters.
1Qualcomm
285315 5g Iot Firmware
Aqt1000 FirmwareAr8031 Firmware+282 more
Jun 17, 2026
Sep 5, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption in WLAN HAL while handling command through WMI interfaces.
1Qualcomm
30Fastconnect 6800 Firmware
Fastconnect 6900 FirmwareFastconnect 7800 Firmware+27 more
Jun 17, 2026
Aug 8, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
In the function call related to CAM_REQ_MGR_RELEASE_BUF there is no check if the buffer is being used. So when a function called cam_mem_get_cpu_buf to get the kernel va to use, another thread can call CAM_REQ_MGR_RELEAS...Show more
In the function call related to CAM_REQ_MGR_RELEASE_BUF there is no check if the buffer is being used. So when a function called cam_mem_get_cpu_buf to get the kernel va to use, another thread can call CAM_REQ_MGR_RELEASE_BUF to unmap the kernel va which cause UAF of the kernel address.Show less