CVEs (542)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Qualcomm 99Aqt1000 Firmware Ar8035 FirmwareQam8295p Firmware+96 moreJun 17, 2026 May 2, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Information disclosure due to buffer over-read in Trusted Execution Environment while QRKS report generation. |
1Qualcomm 68315 5g Iot Modem Firmware Ar8035 FirmwareQca6390 Firmware+65 moreJun 17, 2026 May 2, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS due to reachable assertion in Modem during OSI decode scheduling. |
1Qualcomm 409205 Lte Modem Firmware 9206 Lte Modem Firmware9207 Lte Modem Firmware+37 moreJun 17, 2026 May 2, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS due to NULL pointer dereference in Modem while performing pullup for received TCP/UDP packet. |
1Qualcomm 353315 5g Iot Modem Firmware 8905 Firmware8909 Firmware+350 moreJun 17, 2026 Apr 13, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption due to integer overflow or wraparound in WLAN while sending WMI cmd from host to target. |
1Qualcomm 399205 Lte Modem Firmware 9206 Lte Modem Firmware9207 Lte Modem Firmware+36 moreJun 17, 2026 Apr 13, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Information disclosure in Modem due to buffer over-read while receiving a IP header with malformed length. |
1Qualcomm 128315 5g Iot Modem Firmware Aqt1000 FirmwareAr8035 Firmware+125 moreJun 17, 2026 Apr 13, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Memory corruption due to buffer copy without checking the size of input in Core while sending SCM command to get write protection information. |
1Qualcomm 399205 Lte Modem Firmware 9206 Lte Modem Firmware9207 Lte Modem Firmware+36 moreJun 17, 2026 Apr 13, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Information disclosure in Modem due to buffer over-read while getting length of Unfragmented headers in an IPv6 packet. |
1Qualcomm 101Aqt1000 Firmware Ar8035 FirmwareQam8295p Firmware+98 moreJun 17, 2026 Apr 13, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption due to integer overflow or wraparound in Core while DDR memory assignment. |
1Qualcomm 219315 5g Iot Modem Firmware 8098 Firmware8909 Firmware+216 moreJun 17, 2026 Apr 13, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption due to double free in core while initializing the encryption key. |
1Qualcomm 26Mdm8207 Firmware Mdm9205 FirmwareMdm9206 Firmware+23 moreJun 17, 2026 Apr 13, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Denial of service in modem due to missing null check while processing the ipv6 packet received during ECM call |
1Qualcomm 27Mdm8207 Firmware Mdm9205 FirmwareMdm9206 Firmware+24 moreJun 17, 2026 Apr 13, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Information disclosure in modem due to improper check of IP type while processing DNS server query |
1Qualcomm 26Mdm8207 Firmware Mdm9205 FirmwareMdm9206 Firmware+23 moreJun 17, 2026 Apr 13, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Information disclosure in modem data due to array out of bound access while handling the incoming DNS response packet |
1Qualcomm 284Apq8009 Firmware Apq8017 FirmwareApq8076 Firmware+281 moreJun 17, 2026 Mar 10, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID message. |
1Qualcomm 189Aqt1000 Firmware Ar8031 FirmwareAr8035 Firmware+186 moreJun 17, 2026 Mar 10, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in WLAN due to integer overflow to buffer overflow in WLAN during initialization phase. |
1Qualcomm 99Ar8035 Firmware Csr8811 FirmwareIpq5010 Firmware+96 moreJun 17, 2026 Mar 10, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS due to reachable assertion in WLAN while processing PEER ID populated by TQM. |
1Qualcomm 65Csr8811 Firmware Ipq5010 FirmwareIpq5018 Firmware+62 moreJun 17, 2026 Mar 10, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS due to buffer over-read in WLAN Firmware while parsing secure FTMR frame with size lesser than 39 Bytes. |
1Qualcomm 123Aqt1000 Firmware Ar8035 FirmwareCsra6620 Firmware+120 moreJun 17, 2026 Mar 10, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption due to buffer copy without checking the size of input in HLOS when input message size is larger than the buffer capacity. |
1Qualcomm 140Aqt1000 Firmware Ar8031 FirmwareAr8035 Firmware+137 moreJun 17, 2026 Mar 10, 2023 N/A· v4 7.0 HIGH· v3 N/A· v2 Memory corruption in Core due to time-of-check time-of-use race condition during dump collection in trust zone. |
1Qualcomm 157Aqt1000 Firmware Ar8031 FirmwareAr8035 Firmware+154 moreJun 17, 2026 Mar 10, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption due to improper authentication in Qualcomm IPC while loading unsigned lib in audio PD. |
1Qualcomm 228Aqt1000 Firmware Ar8031 FirmwareAr8035 Firmware+225 moreJun 17, 2026 Feb 12, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Memory corruption due to buffer copy without checking the size of input in WLAN Firmware while processing CCKM IE in reassoc response frame. |