Search Results (137 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2023-33062 1 Qualcomm 580 315 5g Iot Modem, 315 5g Iot Modem Firmware, Aqt1000 and 577 more 2025-08-11 7.5 High
Transient DOS in WLAN Firmware while parsing a BTM request.
CVE-2023-33109 1 Qualcomm 620 315 5g Iot Modem, 315 5g Iot Modem Firmware, Aqt1000 and 617 more 2025-08-11 7.5 High
Transient DOS while processing a WMI P2P listen start command (0xD00A) sent from host.
CVE-2023-33118 1 Qualcomm 271 Ar8035, Ar8035 Firmware, Csra6620 and 268 more 2025-08-11 7.8 High
Memory corruption while processing Listen Sound Model client payload buffer when there is a request for Listen Sound session get parameter from ST HAL.
CVE-2023-43511 1 Qualcomm 712 315 5g Iot Modem, 315 5g Iot Modem Firmware, 9206 Lte Modem and 709 more 2025-08-11 7.5 High
Transient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains `IPPROTO_NONE` as the next header.
CVE-2023-43546 1 Qualcomm 240 Ar8035, Ar8035 Firmware, Csra6620 and 237 more 2025-08-11 8.4 High
Memory corruption while invoking HGSL IOCTL context create.
CVE-2024-33042 1 Qualcomm 456 205, 205 Firmware, 215 and 453 more 2025-08-11 7.8 High
Memory corruption when Alternative Frequency offset value is set to 255.
CVE-2024-33048 1 Qualcomm 394 Ar8035, Ar8035 Firmware, Csr8811 and 391 more 2025-08-11 7.5 High
Transient DOS while parsing the received TID-to-link mapping element of beacon/probe response frame.
CVE-2024-43051 1 Qualcomm 488 Aqt1000, Aqt1000 Firmware, Ar8031 and 485 more 2025-08-11 5.5 Medium
Information disclosure while deriving keys for a session for any Widevine use case.
CVE-2024-49839 1 Qualcomm 372 Ar8035, Ar8035 Firmware, Csr8811 and 369 more 2025-08-11 8.2 High
Memory corruption during management frame processing due to mismatch in T2LM info element.
CVE-2025-21467 1 Qualcomm 212 215 Mobile, 215 Mobile Firmware, Csra6620 and 209 more 2025-08-11 7.8 High
Memory corruption while reading the FW response from the shared queue.
CVE-2024-49838 1 Qualcomm 338 Ar8035, Ar8035 Firmware, Fastconnect 6200 and 335 more 2025-02-05 8.2 High
Information disclosure while parsing the OCI IE with invalid length.
CVE-2024-49843 1 Qualcomm 104 Fastconnect 6200, Fastconnect 6200 Firmware, Fastconnect 7800 and 101 more 2025-02-05 7.8 High
Memory corruption while processing IOCTL from user space to handle GPU AHB bus error.
CVE-2024-45584 1 Qualcomm 248 Ar8035, Ar8035 Firmware, Fastconnect 6200 and 245 more 2025-02-05 7.8 High
Memory corruption can occur when a compat IOCTL call is followed by a normal IOCTL call from userspace.
CVE-2024-33043 1 Qualcomm 406 205 Mobile Platform, 205 Mobile Platform Firmware, 215 Mobile Platform and 403 more 2024-12-20 5.5 Medium
Transient DOS while handling PS event when Program Service name length offset value is set to 255.
CVE-2024-43052 1 Qualcomm 185 205 Mobile Platform, 205 Mobile Platform Firmware, 215 Mobile Platform and 182 more 2024-12-12 7.8 High
Memory corruption while processing API calls to NPU with invalid input.
CVE-2024-33063 1 Qualcomm 250 Ar8035, Ar8035 Firmware, Fastconnect 6900 and 247 more 2024-12-12 7.5 High
Transient DOS while parsing the ML IE when a beacon with common info length of the ML IE greater than the ML IE inside which this element is present.
CVE-2024-33056 1 Qualcomm 662 205 Mobile Platform, 205 Mobile Platform Firmware, 315 5g Iot Modem and 659 more 2024-12-12 8.4 High
Memory corruption when allocating and accessing an entry in an SMEM partition continuously.
CVE-2024-33044 1 Qualcomm 425 315 5g Iot Modem, 315 5g Iot Modem Firmware, Aqt1000 and 422 more 2024-12-12 8.4 High
Memory corruption while Configuring the SMR/S2CR register in Bypass mode.
CVE-2024-33012 1 Qualcomm 501 Ar8035, Ar8035 Firmware, Ar9380 and 498 more 2024-11-26 7.5 High
Transient DOS while parsing the multiple MBSSID IEs from the beacon, when the tag length is non-zero value but with end of beacon.
CVE-2024-33013 1 Qualcomm 342 Ar8035, Ar8035 Firmware, Csr8811 and 339 more 2024-11-26 7.5 High
Transient DOS when driver accesses the ML IE memory and offset value is incremented beyond ML IE length.