CVEs (816)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Qualcomm 45Aqt1000 Firmware Cologne FirmwareCongo Firmware+42 moreOct 9, 2026 Oct 6, 2026 N/A· v4 6.7 MEDIUM· v3 N/A· v2 Memory Corruption when processing concurrent DMA buffer allocation and deallocation commands without proper synchronization. |
1Qualcomm 1605g Fixed Wireless Access Platform Firmware 9205 Lte Modem Firmware9205s Modem Firmware+157 moreOct 9, 2026 Oct 6, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption when non-secure loader rewrites page tables before secure memory initialization. |
1Qualcomm 1605g Fixed Wireless Access Platform Firmware 9205 Lte Modem Firmware9205s Modem Firmware+157 moreOct 9, 2026 Oct 6, 2026 N/A· v4 6.6 MEDIUM· v3 N/A· v2 Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters. |
1Qualcomm 3695g Fixed Wireless Access Platform Firmware Aqt1000 FirmwareAr8031 Firmware+366 moreSep 22, 2026 Sep 17, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS when processing authentication frames with invalid FILS information element header lengths. |
1Qualcomm 43Aqt1000 Firmware Cologne FirmwareFastconnect 6200 Firmware+40 moreSep 22, 2026 Sep 17, 2026 N/A· v4 7.0 HIGH· v3 N/A· v2 Memory Corruption when multiple threads issue concurrent IOCTL requests to the device control handler due to improper synchronization and race conditions. |
1Qualcomm 1225g Fixed Wireless Access Platform Firmware Aqt1000 FirmwareAr8035 Firmware+119 moreOct 23, 2026 Aug 4, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 Weak configuration when UE does not verify the consistency of its additional security capabilities with the replayed capabilities. |
1Qualcomm 139Aqt1000 Firmware Ar8035 FirmwareCsra6620 Firmware+136 moreOct 23, 2026 Aug 4, 2026 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Information Disclosure when processing wireless network channel switch information with improperly formatted length fields. |
1Qualcomm 52Aqt1000 Firmware Cologne FirmwareFastconnect 6200 Firmware+49 moreOct 23, 2026 Aug 4, 2026 N/A· v4 6.7 MEDIUM· v3 N/A· v2 Memory Corruption when processing registry values with incorrect types using a direct query method. |
1Qualcomm 47Aqt1000 Firmware Cologne FirmwareFastconnect 6200 Firmware+44 moreJul 7, 2026 Jul 6, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory Corruption when allocating memory with sizes that exceed the maximum allowed value. |
1Qualcomm 2665g Fixed Wireless Access Platform Firmware Apq8098 FirmwareAr8031 Firmware+263 moreJul 22, 2026 Jun 1, 2026 N/A· v4 7.2 HIGH· v3 N/A· v2 Memory corruption while processing fastboot commands with improperly formatted input. |
1Qualcomm 2665g Fixed Wireless Access Platform Firmware Apq8098 FirmwareAr8031 Firmware+263 moreJul 22, 2026 Jun 1, 2026 N/A· v4 7.2 HIGH· v3 N/A· v2 Memory Corruption when processing display command line information due to improper initialization of a variable. |
1Qualcomm 50Aqt1000 Firmware Cologne FirmwareFastconnect 6200 Firmware+47 moreJul 22, 2026 Jun 1, 2026 N/A· v4 6.7 MEDIUM· v3 N/A· v2 Memory corruption in diagnostic services due to absence of input validation |
1Qualcomm 2295g Fixed Wireless Access Platform Firmware C V2x 9150 FirmwareCq7790 Firmware+226 moreJul 22, 2026 Jun 1, 2026 N/A· v4 6.4 MEDIUM· v3 N/A· v2 Memory Corruption when processing IOCTL requests with mismatched API versions due to concurrent modification of user-space buffer. |
1Qualcomm 183215 Mobile Firmware 5g Fixed Wireless Access FirmwareAr8031 Firmware+180 moreOct 7, 2026 May 4, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified. |
1Qualcomm 51Aqt1000 Firmware Cologne FirmwareFastconnect 6200 Firmware+48 moreJun 17, 2026 Apr 6, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver. |
1Qualcomm 54Aqt1000 Firmware Cologne FirmwareFastconnect 6200 Firmware+51 moreJun 17, 2026 Apr 6, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver. |
1Qualcomm 54Aqt1000 Firmware Cologne FirmwareFastconnect 6200 Firmware+51 moreJun 17, 2026 Apr 6, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory Corruption when processing auxiliary sensor input/output control commands with insufficient buffer size validation. |
1Qualcomm 54Aqt1000 Firmware Cologne FirmwareFastconnect 6200 Firmware+51 moreJun 17, 2026 Apr 6, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory Corruption when accessing an output buffer without validating its size during IOCTL processing. |
1Qualcomm 52Aqt1000 Firmware Cologne FirmwareFastconnect 6200 Firmware+49 moreJun 17, 2026 Apr 6, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory Corruption when retrieving output buffer with insufficient size validation. |
1Qualcomm 1485g Fixed Wireless Access Platform Firmware Ar8035 FirmwareCsra6620 Firmware+145 moreOct 7, 2026 Apr 6, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Memory corruption when decoding corrupted satellite data files with invalid signature offsets. |