← Back

Qualcomm

qualcomm

2,491 CVEs • 3,563 products

Products (3,563)

Click to collapse
Toggle

CVEs (2,491)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Qualcomm
34Fastconnect 6900 Firmware
Fastconnect 7800 FirmwareQam8255p Firmware+31 more
Jun 17, 2026
Oct 7, 2024
N/A· v4
6.7 MEDIUM· v3
N/A· v2
Memory corruption while unmapping the fastrpc map when two threads can free the same map in concurrent scenario.
1Qualcomm
18Qam8255p Firmware
Qam8650p FirmwareQam8775p Firmware+15 more
Jun 17, 2026
Oct 7, 2024
N/A· v4
6.7 MEDIUM· v3
N/A· v2
Memory corruption while invoking IOCTL calls for MSM module from the user space during audio playback and record.
1Qualcomm
21Fastconnect 6900 Firmware
Fastconnect 7800 FirmwareQca6174a Firmware+18 more
Jun 17, 2026
Oct 7, 2024
N/A· v4
6.7 MEDIUM· v3
N/A· v2
Memory corruption while sending the persist buffer command packet from the user-space to the kernel space through the IOCTL call.
1Qualcomm
14Sa4150p Firmware
Sa4155p FirmwareSa6155p Firmware+11 more
Jun 17, 2026
Oct 7, 2024
N/A· v4
6.7 MEDIUM· v3
N/A· v2
Memory corruption during the network scan request.
1Qualcomm
26Fastconnect 6900 Firmware
Fastconnect 7800 FirmwareQca6174a Firmware+23 more
Jun 17, 2026
Oct 7, 2024
N/A· v4
6.7 MEDIUM· v3
N/A· v2
Memory corruption is possible when an attempt is made from userspace or console to write some haptics effects pattern to the haptics debugfs file.
1Qualcomm
11Qca6584au Firmware
Qca6698aq FirmwareQca9367 Firmware+8 more
Jun 17, 2026
Oct 7, 2024
N/A· v4
6.7 MEDIUM· v3
N/A· v2
Memory corruption when a process invokes IOCTL calls from user-space to create a HAB virtual channel and another process invokes IOCTL calls to destroy the same.
1Qualcomm
118Ar8035 Firmware
Fastconnect 6200 FirmwareFastconnect 6700 Firmware+115 more
Jun 17, 2026
Oct 7, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption when invalid length is provided from HLOS for FRS/UDS request/response buffers.
1Qualcomm
20Qam8295p Firmware
Qca6584au FirmwareQca6595 Firmware+17 more
Jun 17, 2026
Oct 7, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption when a compat IOCTL call is followed by another IOCTL call from userspace to a driver.
1Qualcomm
163Ar8035 Firmware
Csra6620 FirmwareCsra6640 Firmware+160 more
Jun 17, 2026
Sep 2, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption while processing IOCTL call for getting group info.
1Qualcomm
40Ar8035 Firmware
C V2x 9150 FirmwareFastconnect 7800 Firmware+37 more
Jun 17, 2026
Sep 2, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption while processing concurrent IOCTL calls.
1Qualcomm
243215 Mobile Firmware
315 5g Iot FirmwareAqt1000 Firmware+240 more
Jun 17, 2026
Sep 2, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption when two threads try to map and unmap a single node simultaneously.
1Qualcomm
170Ar8035 Firmware
Csr8811 FirmwareFastconnect 6700 Firmware+167 more
Jun 17, 2026
Sep 2, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
Transient DOS while parsing the multi-link element Control field when common information length check is missing before updating the location.
1Qualcomm
32Fastconnect 6700 Firmware
Fastconnect 6900 FirmwareFastconnect 7800 Firmware+29 more
Jun 17, 2026
Sep 2, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption during the handshake between the Primary Virtual Machine and Trusted Virtual Machine.
1Qualcomm
197205 Mobile Firmware
215 Mobile FirmwareApq8017 Firmware+194 more
Jun 17, 2026
Sep 2, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption when user provides data for FM HCI command control operations.
1Qualcomm
282315 5g Iot Firmware
9206 Lte FirmwareApq8017 Firmware+279 more
Jun 17, 2026
Sep 2, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
Transient DOS while processing TIM IE from beacon frame as there is no check for IE length.
1Qualcomm
252Ar8035 Firmware
Ar9380 FirmwareCsr8811 Firmware+249 more
Jun 17, 2026
Sep 2, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing or improper.
1Qualcomm
187Ar8035 Firmware
Csr8811 FirmwareFastconnect 6700 Firmware+184 more
Jun 17, 2026
Sep 2, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
Transient DOS while parsing the received TID-to-link mapping element of beacon/probe response frame.
1Qualcomm
24Fastconnect 6700 Firmware
Fastconnect 6900 FirmwareFastconnect 7800 Firmware+21 more
Jun 17, 2026
Sep 2, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption when the captureRead QDCM command is invoked from user-space.
1Qualcomm
175Ar8035 Firmware
Csra6620 FirmwareCsra6640 Firmware+172 more
Jun 17, 2026
Sep 2, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption when BTFM client sends new messages over Slimbus to ADSP.
1Qualcomm
197205 Mobile Platform Firmware
215 Mobile Platform FirmwareApq8017 Firmware+194 more
Jun 17, 2026
Sep 2, 2024
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Transient DOS while handling PS event when Program Service name length offset value is set to 255.