CVEs (1,007)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Qualcomm 122Ar8035 Firmware Fastconnect 6200 FirmwareFastconnect 6900 Firmware+119 moreJun 17, 2026 Feb 3, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption can occur when a compat IOCTL call is followed by a normal IOCTL call from userspace. |
1Qualcomm 32Aqt1000 Firmware Fastconnect 6200 FirmwareFastconnect 6700 Firmware+29 moreJun 17, 2026 Feb 3, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption while handling IOCTL call from user-space to set latency level. |
1Qualcomm 37Aqt1000 Firmware Fastconnect 6200 FirmwareFastconnect 6700 Firmware+34 moreJun 17, 2026 Feb 3, 2025 N/A· v4 7.0 HIGH· v3 N/A· v2 Memory corruption while taking a snapshot with hardware encoder due to unvalidated userspace buffer. |
1Qualcomm 157Aqt1000 Firmware Ar8035 FirmwareFastconnect 6200 Firmware+154 moreJun 17, 2026 Feb 3, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption while configuring a Hypervisor based input virtual device. |
1Qualcomm 61C V2x 9150 Firmware Csrb31024 FirmwareFastconnect 6800 Firmware+58 moreJun 17, 2026 Feb 3, 2025 N/A· v4 7.0 HIGH· v3 N/A· v2 Memory corruption while parsing the memory map info in IOCTL calls. |
1Qualcomm 56Ar8035 Firmware C V2x 9150 FirmwareFastconnect 6900 Firmware+53 moreJun 17, 2026 Feb 3, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Information disclosure while processing IO control commands. |
1Qualcomm 71Ar8035 Firmware C V2x 9150 FirmwareFastconnect 6800 Firmware+68 moreJun 17, 2026 Feb 3, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Information disclosure during audio playback. |
1Qualcomm 182Ar8035 Firmware Csr8811 FirmwareFastconnect 6700 Firmware+179 moreJun 17, 2026 Jan 6, 2025 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS can occur when the driver parses the per STA profile IE and tries to access the EXTN element ID without checking the IE length. |
1Qualcomm 125Ar8035 Firmware Fastconnect 6200 FirmwareFastconnect 6700 Firmware+122 moreJun 17, 2026 Jan 6, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption can occur when process-specific maps are added to the global list. If a map is removed from the global list while another thread is using it for a process-specific task, issues may arise. |
1Qualcomm 51Aqt1000 Firmware Fastconnect 6200 FirmwareFastconnect 6700 Firmware+48 moreJun 17, 2026 Jan 6, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver. |
1Qualcomm 51Aqt1000 Firmware Fastconnect 6200 FirmwareFastconnect 6700 Firmware+48 moreJun 17, 2026 Jan 6, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption when IOCTL call is invoked from user-space to read board data. |
1Qualcomm 76Ar8035 Firmware C V2x 9150 FirmwareCsrb31024 Firmware+73 moreJun 17, 2026 Jan 6, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Information disclosure while invoking callback function of sound model driver from ADSP for every valid opcode received from sound model driver. |
1Qualcomm 21Fastconnect 6700 Firmware Fastconnect 6900 FirmwareFastconnect 7800 Firmware+18 moreJun 17, 2026 Jan 6, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption while processing IPA statistics, when there are no active clients registered. |
1Qualcomm 89205 Mobile Platform Firmware 215 Mobile Platform FirmwareApq8017 Firmware+86 moreJun 17, 2026 Dec 2, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption while processing API calls to NPU with invalid input. |
1Qualcomm 54Aqt1000 Firmware Fastconnect 6200 FirmwareFastconnect 6700 Firmware+51 moreJun 17, 2026 Dec 2, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption while invoking IOCTL calls from user space to issue factory test command inside WLAN driver. |
1Qualcomm 50Fastconnect 6200 Firmware Fastconnect 6900 FirmwareFastconnect 7800 Firmware+47 moreJun 17, 2026 Dec 2, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption when invalid input is passed to invoke GPU Headroom API call. |
1Qualcomm 323205 Mobile Platform Firmware 315 5g Iot Modem Firmware9205 Lte Modem Firmware+320 moreJun 17, 2026 Dec 2, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption when allocating and accessing an entry in an SMEM partition continuously. |
1Qualcomm 55C V2x 9150 Firmware Fastconnect 6200 FirmwareFastconnect 6800 Firmware+52 moreJun 17, 2026 Dec 2, 2024 N/A· v4 6.7 MEDIUM· v3 N/A· v2 Memory corruption when multiple threads try to unregister the CVP buffer at the same time. |
1Qualcomm 208315 5g Iot Modem Firmware Aqt1000 FirmwareAr8035 Firmware+205 moreJun 17, 2026 Dec 2, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption while Configuring the SMR/S2CR register in Bypass mode. |
1Qualcomm 29Fastconnect 6800 Firmware Fastconnect 6900 FirmwareFastconnect 7800 Firmware+26 moreJun 17, 2026 Dec 2, 2024 N/A· v4 7.0 HIGH· v3 N/A· v2 Memory corruption while invoking redundant release command to release one buffer from user space as race condition can occur in kernel space between buffer release and buffer access. |