CVEs (93)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Qualcomm 225315 5g Iot Modem Firmware 8905 Firmware8909 Firmware+222 moreJun 17, 2026 Apr 13, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption due to improper validation of array index in User Identity Module when APN TLV length is greater than command length. |
1Qualcomm 77Aqt1000 Firmware Qca6310 FirmwareQca6320 Firmware+74 moreJun 17, 2026 Apr 13, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption due to use after free in Modem while modem initialization. |
1Qualcomm 114315 5g Iot Modem Firmware 8905 Firmware8909 Firmware+111 moreJun 17, 2026 Apr 13, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption due to integer overflow to buffer overflow in Modem while parsing Traffic Channel Neighbor List Update message. |
1Qualcomm 399205 Lte Modem Firmware 9206 Lte Modem Firmware9207 Lte Modem Firmware+36 moreJun 17, 2026 Apr 13, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Information disclosure in Modem due to buffer over-read while receiving a IP header with malformed length. |
1Qualcomm 226315 5g Iot Modem Firmware 7wcn785x 1 Firmware8905 Firmware+223 moreJun 17, 2026 Apr 13, 2023 N/A· v4 6.8 MEDIUM· v3 N/A· v2 Memory corruption occurs in Modem due to improper validation of array index when malformed APDU is sent from card. |
1Qualcomm 128315 5g Iot Modem Firmware Aqt1000 FirmwareAr8035 Firmware+125 moreJun 17, 2026 Apr 13, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Memory corruption due to buffer copy without checking the size of input in Core while sending SCM command to get write protection information. |
1Qualcomm 399205 Lte Modem Firmware 9206 Lte Modem Firmware9207 Lte Modem Firmware+36 moreJun 17, 2026 Apr 13, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Information disclosure in Modem due to buffer over-read while getting length of Unfragmented headers in an IPv6 packet. |
1Qualcomm 42Ar8035 Firmware Qca6391 FirmwareQca6595au Firmware+39 moreJun 17, 2026 Apr 13, 2023 N/A· v4 5.9 MEDIUM· v3 N/A· v2 Transient DOS due to time-of-check time-of-use race condition in Modem while processing RRC Reconfiguration message. |
1Qualcomm 101Aqt1000 Firmware Ar8035 FirmwareQam8295p Firmware+98 moreJun 17, 2026 Apr 13, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption due to integer overflow or wraparound in Core while DDR memory assignment. |
1Qualcomm 219315 5g Iot Modem Firmware 8098 Firmware8909 Firmware+216 moreJun 17, 2026 Apr 13, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption due to double free in core while initializing the encryption key. |
1Qualcomm 26Mdm8207 Firmware Mdm9205 FirmwareMdm9206 Firmware+23 moreJun 17, 2026 Apr 13, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Denial of service in modem due to missing null check while processing the ipv6 packet received during ECM call |
1Qualcomm 27Mdm8207 Firmware Mdm9205 FirmwareMdm9206 Firmware+24 moreJun 17, 2026 Apr 13, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Information disclosure in modem due to improper check of IP type while processing DNS server query |
1Qualcomm 26Mdm8207 Firmware Mdm9205 FirmwareMdm9206 Firmware+23 moreJun 17, 2026 Apr 13, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Information disclosure in modem data due to array out of bound access while handling the incoming DNS response packet |