CVEs (769)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Qualcomm 183215 Mobile Firmware 5g Fixed Wireless Access FirmwareAr8031 Firmware+180 moreJun 17, 2026 May 4, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified. |
1Qualcomm 254Ar8035 Firmware Cologne FirmwareCq7790 Firmware+251 moreJun 17, 2026 May 4, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming. |
1Qualcomm 241Ar8035 Firmware Cologne FirmwareCq7790 Firmware+238 moreJun 17, 2026 May 4, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS when processing target power rate tables during channel configuration. |
1Qualcomm 102Ar8035 Firmware Cologne FirmwareFastconnect 6200 Firmware+99 moreJun 17, 2026 Apr 6, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS when receiving a service data frame with excessive length during device matching over a neighborhood awareness network protocol connection. |
1Qualcomm 51Aqt1000 Firmware Cologne FirmwareFastconnect 6200 Firmware+48 moreJun 17, 2026 Apr 6, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver. |
1Qualcomm 54Aqt1000 Firmware Cologne FirmwareFastconnect 6200 Firmware+51 moreJun 17, 2026 Apr 6, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver. |
1Qualcomm 54Aqt1000 Firmware Cologne FirmwareFastconnect 6200 Firmware+51 moreJun 17, 2026 Apr 6, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory Corruption when processing auxiliary sensor input/output control commands with insufficient buffer size validation. |
1Qualcomm 54Aqt1000 Firmware Cologne FirmwareFastconnect 6200 Firmware+51 moreJun 17, 2026 Apr 6, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory Corruption when accessing an output buffer without validating its size during IOCTL processing. |
1Qualcomm 52Aqt1000 Firmware Cologne FirmwareFastconnect 6200 Firmware+49 moreJun 17, 2026 Apr 6, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory Corruption when retrieving output buffer with insufficient size validation. |
1Qualcomm 149Ar8035 Firmware Cologne FirmwareCsr8811 Firmware+146 moreJun 17, 2026 Apr 6, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS when processing nonstandard FILS Discovery Frames with out-of-range action sizes during initial scans. |
1Qualcomm 1485g Fixed Wireless Access Platform Firmware Ar8035 FirmwareCsra6620 Firmware+145 moreJun 17, 2026 Apr 6, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Memory corruption when decoding corrupted satellite data files with invalid signature offsets. |
1Qualcomm 176Ar8035 Firmware Cologne FirmwareCsra6620 Firmware+173 moreJun 17, 2026 Apr 6, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption when buffer copy operation fails due to integer overflow during attestation report generation. |
1Qualcomm 165Ar8031 Firmware Ar8035 FirmwareCsra6620 Firmware+162 moreJun 17, 2026 Mar 2, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory Corruption while invoking IOCTL calls when concurrent access to shared buffer occurs. |
1Qualcomm 2025g Fixed Wireless Access Platform Firmware 9206 Lte Modem Firmware9207 Lte Modem Firmware+199 moreJun 17, 2026 Mar 2, 2026 N/A· v4 7.2 HIGH· v3 N/A· v2 Weak configuration may lead to cryptographic issue when a VoWiFi call is triggered from UE. |
1Qualcomm 1735g Fixed Wireless Access Platform Firmware Ar8031 FirmwareAr8035 Firmware+170 moreJun 17, 2026 Mar 2, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory Corruption when concurrent access to shared buffer occurs due to improper synchronization between assignment and deallocation of buffer resources. |
1Qualcomm 120Ar8035 Firmware Fastconnect 6200 FirmwareFastconnect 6900 Firmware+117 moreJun 17, 2026 Mar 2, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory Corruption when accessing a buffer after it has been freed while processing IOCTL calls. |
1Qualcomm 165Ar8031 Firmware Ar8035 FirmwareCsra6620 Firmware+162 moreJun 17, 2026 Mar 2, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory Corruption when concurrent access to shared buffer occurs during IOCTL calls. |
1Qualcomm 164Ar8031 Firmware Ar8035 FirmwareCsra6620 Firmware+161 moreJun 17, 2026 Mar 2, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption while handling different IOCTL calls from the user-space simultaneously. |
1Qualcomm 184Ar8035 Firmware Cologne FirmwareFastconnect 6200 Firmware+181 moreJun 17, 2026 Mar 2, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory Corruption when accessing buffers with invalid length during TA invocation. |
1Qualcomm 1225g Fixed Wireless Access Platform Firmware Ar8035 FirmwareCsra6620 Firmware+119 moreJun 17, 2026 Mar 2, 2026 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Transient DOS when an LTE RLC packet with invalid TB is received by UE. |