CVEs (1,182)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Qualcomm 21Fastconnect 6700 Firmware Fastconnect 6900 FirmwareFastconnect 7800 Firmware+18 moreJun 17, 2026 Jun 3, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 memory corruption while processing IOCTL commands, when the buffer in write loopback mode is accessed after being freed. |
1Qualcomm 31Fastconnect 6900 Firmware Fastconnect 7800 FirmwareQmp1000 Firmware+28 moreJun 17, 2026 Jun 3, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption during dynamic process creation call when client is only passing address and length of shell binary. |
1Qualcomm 29Fastconnect 6900 Firmware Fastconnect 7800 FirmwareQmp1000 Firmware+26 moreJun 17, 2026 Jun 3, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption while processing INIT and multimode invoke IOCTL calls on FastRPC. |
1Qualcomm 75Aqt1000 Firmware Fastconnect 6200 FirmwareFastconnect 6700 Firmware+72 moreJun 17, 2026 Jun 3, 2025 N/A· v4 8.6 HIGH· v3 N/A· v2 Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands. |
1Qualcomm 210Ar8035 Firmware Csr8811 FirmwareFastconnect 6700 Firmware+207 moreJun 17, 2026 Jun 3, 2025 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS while processing the EHT operation IE in the received beacon frame. |
1Qualcomm 232205 Mobile Platform Firmware 215 Mobile Platform FirmwareApq8017 Firmware+229 moreJun 17, 2026 Jun 3, 2025 N/A· v4 8.2 HIGH· v3 N/A· v2 Information disclosure when an invalid RTCP packet is received during a VoLTE/VoWiFi IMS call. |
1Qualcomm 223205 Mobile Platform Firmware 215 Mobile Platform FirmwareApq8017 Firmware+220 moreJun 17, 2026 Jun 3, 2025 N/A· v4 8.2 HIGH· v3 N/A· v2 Information disclosure may occur while processing goodbye RTCP packet from network. |
1Qualcomm 232205 Mobile Platform Firmware 215 Mobile Platform FirmwareApq8017 Firmware+229 moreJun 17, 2026 Jun 3, 2025 N/A· v4 8.2 HIGH· v3 N/A· v2 Information disclosure may occur while decoding the RTP packet with invalid header extension from network. |
1Qualcomm 79Fastconnect 6200 Firmware Fastconnect 6700 FirmwareFastconnect 6900 Firmware+76 moreJun 17, 2026 Jun 3, 2025 N/A· v4 8.2 HIGH· v3 N/A· v2 Information disclosure may occur while decoding the RTP packet with improper header length for number of contributing sources. |
1Qualcomm 19Fastconnect 6900 Firmware Fastconnect 7800 FirmwareSdm429w Firmware+16 moreJun 17, 2026 Jun 3, 2025 N/A· v4 6.6 MEDIUM· v3 N/A· v2 Memory corruption may occur while processing the OIS packet parser. |
1Qualcomm 34Fastconnect 6800 Firmware Fastconnect 6900 FirmwareFastconnect 7800 Firmware+31 moreJun 17, 2026 Jun 3, 2025 N/A· v4 6.6 MEDIUM· v3 N/A· v2 Memory corruption while processing I2C settings in Camera driver. |
1Qualcomm 90Aqt1000 Firmware Fastconnect 6200 FirmwareFastconnect 6700 Firmware+87 moreJun 17, 2026 Jun 3, 2025 N/A· v4 6.6 MEDIUM· v3 N/A· v2 Memory corruption while processing IOCTL command to handle buffers associated with a session. |
1Qualcomm 60C V2x 9150 Firmware Fastconnect 6800 FirmwareFastconnect 6900 Firmware+57 moreJun 17, 2026 Jun 3, 2025 N/A· v4 6.6 MEDIUM· v3 N/A· v2 Memory corruption may occur while processing voice call registration with user. |
1Qualcomm 191Aqt1000 Firmware Ar8035 FirmwareFastconnect 6200 Firmware+188 moreJun 17, 2026 Jun 3, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption may occur while attaching VM when the HLOS retains access to VM. |
1Qualcomm 40Aqt1000 Firmware Fastconnect 6200 FirmwareFastconnect 6700 Firmware+37 moreJun 17, 2026 May 6, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption while processing escape code, when DisplayId is passed with large unsigned value. |
1Qualcomm 33Aqt1000 Firmware Fastconnect 6200 FirmwareFastconnect 6700 Firmware+30 moreJun 17, 2026 May 6, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption while processing image encoding, when configuration is NULL in IOCTL parameter. |
1Qualcomm 20Fastconnect 6700 Firmware Fastconnect 6900 FirmwareFastconnect 7800 Firmware+17 moreJun 17, 2026 May 6, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption while processing image encoding, when input buffer length is 0 in IOCTL call. |
1Qualcomm 146Ar8035 Firmware Csra6620 FirmwareCsra6640 Firmware+143 moreJun 17, 2026 May 6, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption while reading response from FW, when buffer size is changed by FW while driver is using this size to write null character at the end of buffer. |
1Qualcomm 103215 Mobile Firmware Csra6620 FirmwareCsra6640 Firmware+100 moreJun 17, 2026 May 6, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption while reading the FW response from the shared queue. |
1Qualcomm 13Fastconnect 6900 Firmware Fastconnect 7800 FirmwareSa4150p Firmware+10 moreJun 17, 2026 May 6, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption while processing an IOCTL request, when buffer significantly exceeds the command argument limit. |