Search Results (722 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-21424 1 Qualcomm 478 215, 215 Firmware, 315 5g Iot Modem and 475 more 2025-08-11 7.8 High
Memory corruption while calling the NPU driver APIs concurrently.
CVE-2024-53027 1 Qualcomm 424 205, 205 Firmware, Apq8017 and 421 more 2025-08-11 7.5 High
Transient DOS may occur while processing the country IE.
CVE-2023-33067 1 Qualcomm 228 9206 Lte Modem, 9206 Lte Modem Firmware, Aqt1000 and 225 more 2025-08-11 6.7 Medium
Memory corruption in Audio while calling START command on host voice PCM multiple times for the same RX or TX tap points.
CVE-2023-33115 1 Qualcomm 336 Aqt1000, Aqt1000 Firmware, Ar8035 and 333 more 2025-08-11 7.8 High
Memory corruption while processing buffer initialization, when trusted report for certain report types are generated.
CVE-2024-33050 1 Qualcomm 541 Ar8035, Ar8035 Firmware, Ar9380 and 538 more 2025-08-11 7.5 High
Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing or improper.
CVE-2025-21432 1 Qualcomm 493 Aqt1000, Aqt1000 Firmware, Ar8035 and 490 more 2025-08-11 7.8 High
Memory corruption while retrieving the CBOR data from TA.
CVE-2024-45541 1 Qualcomm 102 Aqt1000, Aqt1000 Firmware, Fastconnect 6200 and 99 more 2025-08-11 7.8 High
Memory corruption when IOCTL call is invoked from user-space to read board data.
CVE-2024-49841 1 Qualcomm 346 Aqt1000, Aqt1000 Firmware, Ar8035 and 343 more 2025-08-11 7.8 High
Memory corruption during memory assignment to headless peripheral VM due to incorrect error code handling.
CVE-2023-43520 1 Qualcomm 140 Ar8035, Ar8035 Firmware, Fastconnect 6900 and 137 more 2025-08-11 8.6 High
Memory corruption when AP includes TID to link mapping IE in the beacons and STA is parsing the beacon TID to link mapping IE.
CVE-2023-43529 1 Qualcomm 322 315 5g Iot Modem, 315 5g Iot Modem Firmware, Aqt1000 and 319 more 2025-08-11 7.5 High
Transient DOS while processing IKEv2 Informational request messages, when a malformed fragment packet is received.
CVE-2023-43550 1 Qualcomm 270 Ar8035, Ar8035 Firmware, Csra6620 and 267 more 2025-08-11 7.8 High
Memory corruption while processing a QMI request for allocating memory from a DHMS supported subsystem.
CVE-2023-28585 1 Qualcomm 562 315 5g Iot Modem, 315 5g Iot Modem Firmware, 9205 Lte Modem and 559 more 2025-08-11 8.2 High
Memory corruption while loading an ELF segment in TEE Kernel.
CVE-2023-33096 1 Qualcomm 204 315 5g Iot Modem, 315 5g Iot Modem Firmware, Ar8035 and 201 more 2025-08-11 7.5 High
Transient DOS while processing DL NAS Transport message, as specified in 3GPP 24.501 v16.
CVE-2025-27061 1 Qualcomm 689 315 5g Iot, 315 5g Iot Firmware, Aqt1000 and 686 more 2025-08-11 7.8 High
Memory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the video firmware.
CVE-2023-43511 1 Qualcomm 712 315 5g Iot Modem, 315 5g Iot Modem Firmware, 9206 Lte Modem and 709 more 2025-08-11 7.5 High
Transient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains `IPPROTO_NONE` as the next header.
CVE-2024-33057 1 Qualcomm 356 Ar8035, Ar8035 Firmware, Csr8811 and 353 more 2025-08-11 7.5 High
Transient DOS while parsing the multi-link element Control field when common information length check is missing before updating the location.
CVE-2023-43521 1 Qualcomm 154 Ar8035, Ar8035 Firmware, C-v2x 9150 and 151 more 2025-08-11 6.7 Medium
Memory corruption when multiple listeners are being registered with the same file descriptor.
CVE-2023-33059 1 Qualcomm 518 315 5g Iot Modem, 315 5g Iot Modem Firmware, 8098 and 515 more 2025-08-11 7.8 High
Memory corruption in Audio while processing the VOC packet data from ADSP.
CVE-2023-33066 1 Qualcomm 626 205 Mobile, 205 Mobile Firmware, 215 Mobile and 623 more 2025-08-11 8.4 High
Memory corruption in Audio while processing RT proxy port register driver.
CVE-2024-23369 1 Qualcomm 237 Ar8035, Ar8035 Firmware, Fastconnect 6200 and 234 more 2025-08-11 7.8 High
Memory corruption when invalid length is provided from HLOS for FRS/UDS request/response buffers.