CVEs (1,009)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Qualcomm 28Cologne Firmware Fastconnect 6700 FirmwareFastconnect 6900 Firmware+25 moreJun 17, 2026 Apr 6, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory Corruption when sending IOCTL requests with invalid buffer sizes during memcpy operations. |
1Qualcomm 52Aqt1000 Firmware Cologne FirmwareFastconnect 6200 Firmware+49 moreJun 17, 2026 Apr 6, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory Corruption when retrieving output buffer with insufficient size validation. |
1Qualcomm 149Ar8035 Firmware Cologne FirmwareCsr8811 Firmware+146 moreJun 17, 2026 Apr 6, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS when processing nonstandard FILS Discovery Frames with out-of-range action sizes during initial scans. |
1Qualcomm 1485g Fixed Wireless Access Platform Firmware Ar8035 FirmwareCsra6620 Firmware+145 moreJun 17, 2026 Apr 6, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Memory corruption when decoding corrupted satellite data files with invalid signature offsets. |
1Qualcomm 99Fastconnect 6200 Firmware Fastconnect 6700 FirmwareFastconnect 6900 Firmware+96 moreJun 17, 2026 Apr 6, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption while processing a frame request from user. |
1Qualcomm 29Cologne Firmware Fastconnect 6700 FirmwareFastconnect 6900 Firmware+26 moreJun 17, 2026 Apr 6, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption while preprocessing IOCTL request in JPEG driver. |
1Qualcomm 176Ar8035 Firmware Cologne FirmwareCsra6620 Firmware+173 moreJun 17, 2026 Apr 6, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption when buffer copy operation fails due to integer overflow during attestation report generation. |
1Qualcomm 2315g Fixed Wireless Access Platform Firmware Apq8098 FirmwareAr8031 Firmware+228 moreJun 17, 2026 Mar 2, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption while using alignments for memory allocation. |
1Qualcomm 162Ar8031 Firmware Ar8035 FirmwareCsra6620 Firmware+159 moreJun 17, 2026 Mar 2, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory Corruption when adding user-supplied data without checking available buffer space. |
1Qualcomm 165Ar8031 Firmware Ar8035 FirmwareCsra6620 Firmware+162 moreJun 17, 2026 Mar 2, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory Corruption while invoking IOCTL calls when concurrent access to shared buffer occurs. |
1Qualcomm 93Fastconnect 6200 Firmware Fastconnect 6700 FirmwareFastconnect 6900 Firmware+90 moreJun 17, 2026 Mar 2, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory Corruption when accessing trusted execution environment without proper privilege check. |
1Qualcomm 395g Fixed Wireless Access Platform Firmware Fastconnect 6200 FirmwareFastconnect 6700 Firmware+36 moreJun 17, 2026 Mar 2, 2026 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Transient DOS when MAC configures config id greater than supported maximum value. |
1Qualcomm 2025g Fixed Wireless Access Platform Firmware 9206 Lte Modem Firmware9207 Lte Modem Firmware+199 moreJun 17, 2026 Mar 2, 2026 N/A· v4 7.2 HIGH· v3 N/A· v2 Weak configuration may lead to cryptographic issue when a VoWiFi call is triggered from UE. |
1Qualcomm 1735g Fixed Wireless Access Platform Firmware Ar8031 FirmwareAr8035 Firmware+170 moreJun 17, 2026 Mar 2, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory Corruption when concurrent access to shared buffer occurs due to improper synchronization between assignment and deallocation of buffer resources. |
1Qualcomm 120Ar8035 Firmware Fastconnect 6200 FirmwareFastconnect 6900 Firmware+117 moreJun 17, 2026 Mar 2, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory Corruption when accessing a buffer after it has been freed while processing IOCTL calls. |
1Qualcomm 165Ar8031 Firmware Ar8035 FirmwareCsra6620 Firmware+162 moreJun 17, 2026 Mar 2, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory Corruption when concurrent access to shared buffer occurs during IOCTL calls. |
1Qualcomm 164Ar8031 Firmware Ar8035 FirmwareCsra6620 Firmware+161 moreJun 17, 2026 Mar 2, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption while handling different IOCTL calls from the user-space simultaneously. |
1Qualcomm 184Ar8035 Firmware Cologne FirmwareFastconnect 6200 Firmware+181 moreJun 17, 2026 Mar 2, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory Corruption when accessing buffers with invalid length during TA invocation. |
1Qualcomm 1225g Fixed Wireless Access Platform Firmware Ar8035 FirmwareCsra6620 Firmware+119 moreJun 17, 2026 Mar 2, 2026 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Transient DOS when an LTE RLC packet with invalid TB is received by UE. |
1Qualcomm 94Ar8035 Firmware Cologne FirmwareFastconnect 6900 Firmware+91 moreJun 17, 2026 Feb 2, 2026 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Transient DOS when processing a received frame with an excessively large authentication information element. |