Total
167 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2025-47378 | 1 Qualcomm | 148 Cologne, Cologne Firmware, Fastconnect 6700 and 145 more | 2026-03-05 | N/A | 7.1 HIGH |
|
Cryptographic Issue when a shared VM reference allows HLOS to boot loader and access cert chain.
|
|||||
| CVE-2025-47373 | 1 Qualcomm | 376 Ar8035, Ar8035 Firmware, Cologne and 373 more | 2026-03-04 | N/A | 7.8 HIGH |
|
Memory Corruption when accessing buffers with invalid length during TA invocation.
|
|||||
| CVE-2026-21385 | 1 Qualcomm | 474 5g Fixed Wireless Access Platform, 5g Fixed Wireless Access Platform Firmware, Apq8098 and 471 more | 2026-03-04 | N/A | 7.8 HIGH |
|
Memory corruption while using alignments for memory allocation.
|
|||||
| CVE-2025-59603 | 1 Qualcomm | 58 Cologne, Cologne Firmware, Fastconnect 6900 and 55 more | 2026-03-04 | N/A | 7.8 HIGH |
|
Memory Corruption when processing invalid user address with nonstandard buffer address.
|
|||||
| CVE-2025-59600 | 1 Qualcomm | 328 Ar8031, Ar8031 Firmware, Ar8035 and 325 more | 2026-03-03 | N/A | 7.8 HIGH |
|
Memory Corruption when adding user-supplied data without checking available buffer space.
|
|||||
| CVE-2025-47402 | 1 Qualcomm | 188 Ar8035, Ar8035 Firmware, Cologne and 185 more | 2026-02-11 | N/A | 6.5 MEDIUM |
|
Transient DOS when processing a received frame with an excessively large authentication information element.
|
|||||
| CVE-2025-47398 | 1 Qualcomm | 306 Ar8031, Ar8031 Firmware, Csra6620 and 303 more | 2026-02-11 | N/A | 7.8 HIGH |
|
Memory Corruption while deallocating graphics processing unit memory buffers due to improper handling of memory pointers.
|
|||||
| CVE-2025-47397 | 1 Qualcomm | 294 Ar8031, Ar8031 Firmware, Csra6620 and 291 more | 2026-02-11 | N/A | 7.8 HIGH |
|
Memory Corruption when initiating GPU memory mapping using scatter-gather lists due to unchecked IOMMU mapping errors.
|
|||||
| CVE-2025-47366 | 1 Qualcomm | 318 Ar8035, Ar8035 Firmware, Fastconnect 6200 and 315 more | 2026-02-11 | N/A | 7.1 HIGH |
|
Cryptographic issue when a Trusted Zone with outdated code is triggered by a HLOS providing incorrect input.
|
|||||
| CVE-2025-21429 | 1 Qualcomm | 364 9206 Lte Modem, 9206 Lte Modem Firmware, Apq8017 and 361 more | 2026-02-10 | N/A | 7.5 HIGH |
|
Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request.
|
|||||
| CVE-2025-21449 | 1 Qualcomm | 370 315 5g Iot, 315 5g Iot Firmware, Apq8017 and 367 more | 2026-02-10 | N/A | 7.5 HIGH |
|
Transient DOS may occur while processing malformed length field in SSID IEs.
|
|||||
| CVE-2025-47319 | 1 Qualcomm | 236 Ar8035, Ar8035 Firmware, Fastconnect 6200 and 233 more | 2026-01-28 | N/A | 6.7 MEDIUM |
|
Information disclosure while exposing internal TA-to-TA communication APIs to HLOS
|
|||||
| CVE-2025-47323 | 1 Qualcomm | 356 Ar8035, Ar8035 Firmware, Csra6620 and 353 more | 2026-01-28 | N/A | 7.8 HIGH |
|
Memory corruption while routing GPR packets between user and root when handling large data packet.
|
|||||
| CVE-2025-47330 | 1 Qualcomm | 446 Ar8031, Ar8031 Firmware, Ar8035 and 443 more | 2026-01-28 | N/A | 5.5 MEDIUM |
|
Transient DOS while parsing video packets received from the video firmware.
|
|||||
| CVE-2025-47331 | 1 Qualcomm | 598 Ar8031, Ar8031 Firmware, Ar8035 and 595 more | 2026-01-28 | N/A | 6.1 MEDIUM |
|
Information disclosure while processing a firmware event.
|
|||||
| CVE-2025-47333 | 1 Qualcomm | 478 Aqt1000, Aqt1000 Firmware, Ar8031 and 475 more | 2026-01-28 | N/A | 6.6 MEDIUM |
|
Memory corruption while handling buffer mapping operations in the cryptographic driver.
|
|||||
| CVE-2025-47348 | 1 Qualcomm | 408 Aqt1000, Aqt1000 Firmware, Ar8035 and 405 more | 2026-01-28 | N/A | 7.8 HIGH |
|
Memory corruption while processing identity credential operations in the trusted application.
|
|||||
| CVE-2025-47332 | 1 Qualcomm | 148 Fastconnect 6200, Fastconnect 6200 Firmware, Fastconnect 6700 and 145 more | 2026-01-28 | N/A | 6.7 MEDIUM |
|
Memory corruption while processing a config call from userspace.
|
|||||
| CVE-2025-47334 | 1 Qualcomm | 292 Csra6620, Csra6620 Firmware, Csra6640 and 289 more | 2026-01-27 | N/A | 6.7 MEDIUM |
|
Memory corruption while processing shared command buffer packet between camera userspace and kernel.
|
|||||
| CVE-2025-47344 | 1 Qualcomm | 164 Csra6620, Csra6620 Firmware, Csra6640 and 161 more | 2026-01-27 | N/A | 6.7 MEDIUM |
|
Memory corruption while handling sensor utility operations.
|
|||||
| CVE-2025-47321 | 1 Qualcomm | 230 Ar8031, Ar8031 Firmware, Ar8035 and 227 more | 2026-01-27 | N/A | 7.8 HIGH |
|
Memory corruption while copying packets received from unix clients.
|
|||||
| CVE-2025-47369 | 1 Qualcomm | 350 Ar8035, Ar8035 Firmware, Csra6620 and 347 more | 2026-01-27 | N/A | 5.5 MEDIUM |
|
Information disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a session ID.
|
|||||
| CVE-2025-21482 | 1 Qualcomm | 574 315 5g Iot Modem, 315 5g Iot Modem Firmware, 9205 Lte Modem and 571 more | 2025-12-02 | N/A | 7.1 HIGH |
|
Cryptographic issue while performing RSA PKCS padding decoding.
|
|||||
| CVE-2024-53015 | 1 Qualcomm | 182 Aqt1000, Aqt1000 Firmware, Fastconnect 6200 and 179 more | 2025-11-28 | N/A | 6.6 MEDIUM |
|
Memory corruption while processing IOCTL command to handle buffers associated with a session.
|
|||||
| CVE-2024-53010 | 1 Qualcomm | 386 Aqt1000, Aqt1000 Firmware, Ar8035 and 383 more | 2025-11-28 | N/A | 7.8 HIGH |
|
Memory corruption may occur while attaching VM when the HLOS retains access to VM.
|
|||||
| CVE-2025-21465 | 1 Qualcomm | 698 315 5g Iot Modem, 315 5g Iot Modem Firmware, 9205 Lte Modem and 695 more | 2025-11-28 | N/A | 6.5 MEDIUM |
|
Information disclosure while processing the hash segment in an MBN file.
|
|||||
| CVE-2025-21464 | 1 Qualcomm | 684 315 5g Iot Modem, 315 5g Iot Modem Firmware, 9205 Lte Modem and 681 more | 2025-11-28 | N/A | 6.5 MEDIUM |
|
Information disclosure while reading data from an image using specified offset and size parameters.
|
|||||
| CVE-2025-21463 | 1 Qualcomm | 422 Ar8035, Ar8035 Firmware, Csr8811 and 419 more | 2025-11-28 | N/A | 7.5 HIGH |
|
Transient DOS while processing the EHT operation IE in the received beacon frame.
|
|||||
| CVE-2025-47318 | 1 Qualcomm | 406 Apq8017, Apq8017 Firmware, Apq8064au and 403 more | 2025-11-28 | N/A | 7.5 HIGH |
|
Transient DOS while parsing the EPTM test control message to get the test pattern.
|
|||||
| CVE-2025-27066 | 1 Qualcomm | 744 315 5g Iot Modem, 315 5g Iot Modem Firmware, Aqt1000 and 741 more | 2025-11-28 | N/A | 7.5 HIGH |
|
Transient DOS while processing an ANQP message.
|
|||||
| CVE-2025-27032 | 1 Qualcomm | 384 Aqt1000, Aqt1000 Firmware, Ar8035 and 381 more | 2025-11-28 | N/A | 7.8 HIGH |
|
memory corruption while loading a PIL authenticated VM, when authenticated VM image is loaded without maintaining cache coherency.
|
|||||
| CVE-2025-27041 | 1 Qualcomm | 126 Ar8035, Ar8035 Firmware, Fastconnect 6900 and 123 more | 2025-11-05 | N/A | 5.5 MEDIUM |
|
Transient DOS while processing video packets received from video firmware.
|
|||||
| CVE-2025-27053 | 1 Qualcomm | 638 215 Mobile Platform, 215 Mobile Platform Firmware, 315 5g Iot Modem and 635 more | 2025-11-05 | N/A | 7.8 HIGH |
|
Memory corruption during PlayReady APP usecase while processing TA commands.
|
|||||
| CVE-2025-27054 | 1 Qualcomm | 598 315 5g Iot Modem, 315 5g Iot Modem Firmware, 9205 Lte Modem and 595 more | 2025-11-05 | N/A | 7.8 HIGH |
|
Memory corruption while processing a malformed license file during reboot.
|
|||||
| CVE-2025-27064 | 1 Qualcomm | 154 Fastconnect 6900, Fastconnect 6900 Firmware, Fastconnect 7800 and 151 more | 2025-11-05 | N/A | 6.1 MEDIUM |
|
Information disclosure while registering commands from clients with diag through diagHal.
|
|||||
| CVE-2025-27070 | 1 Qualcomm | 350 Ar8035, Ar8035 Firmware, Fastconnect 6200 and 347 more | 2025-11-05 | N/A | 7.8 HIGH |
|
Memory corruption while performing encryption and decryption commands.
|
|||||
| CVE-2025-47370 | 1 Qualcomm | 272 Ar8035, Ar8035 Firmware, Csrb31024 and 269 more | 2025-11-05 | N/A | 6.5 MEDIUM |
|
Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan.
|
|||||
| CVE-2025-21479 | 1 Qualcomm | 150 Aqt1000, Aqt1000 Firmware, Fastconnect 6200 and 147 more | 2025-10-28 | N/A | 8.6 HIGH |
|
Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.
|
|||||
| CVE-2025-21480 | 1 Qualcomm | 152 Aqt1000, Aqt1000 Firmware, Fastconnect 6200 and 149 more | 2025-10-28 | N/A | 8.6 HIGH |
|
Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.
|
|||||
| CVE-2025-27039 | 1 Qualcomm | 18 Fastconnect 6900, Fastconnect 6900 Firmware, Fastconnect 7800 and 15 more | 2025-10-15 | N/A | 6.6 MEDIUM |
|
Memory corruption may occur while processing IOCTL call for DMM/WARPNCC CONFIG request.
|
|||||