Search
Search Results (287 CVEs found)
CVE | Vendors | Products | Updated | CVSS v3.1 |
---|---|---|---|---|
CVE-2023-33027 | 1 Qualcomm | 683 315 5g Iot Modem, 315 5g Iot Modem Firmware, 8098 and 680 more | 2025-08-11 | 7.5 High |
Transient DOS in WLAN Firmware while parsing rsn ies. | ||||
CVE-2023-33062 | 1 Qualcomm | 580 315 5g Iot Modem, 315 5g Iot Modem Firmware, Aqt1000 and 577 more | 2025-08-11 | 7.5 High |
Transient DOS in WLAN Firmware while parsing a BTM request. | ||||
CVE-2023-33109 | 1 Qualcomm | 620 315 5g Iot Modem, 315 5g Iot Modem Firmware, Aqt1000 and 617 more | 2025-08-11 | 7.5 High |
Transient DOS while processing a WMI P2P listen start command (0xD00A) sent from host. | ||||
CVE-2023-33118 | 1 Qualcomm | 271 Ar8035, Ar8035 Firmware, Csra6620 and 268 more | 2025-08-11 | 7.8 High |
Memory corruption while processing Listen Sound Model client payload buffer when there is a request for Listen Sound session get parameter from ST HAL. | ||||
CVE-2023-43511 | 1 Qualcomm | 712 315 5g Iot Modem, 315 5g Iot Modem Firmware, 9206 Lte Modem and 709 more | 2025-08-11 | 7.5 High |
Transient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains `IPPROTO_NONE` as the next header. | ||||
CVE-2023-43533 | 1 Qualcomm | 476 315 5g Iot Modem, 315 5g Iot Modem Firmware, Aqt1000 and 473 more | 2025-08-11 | 7.5 High |
Transient DOS in WLAN Firmware when the length of received beacon is less than length of ieee802.11 beacon frame. | ||||
CVE-2023-43546 | 1 Qualcomm | 240 Ar8035, Ar8035 Firmware, Csra6620 and 237 more | 2025-08-11 | 8.4 High |
Memory corruption while invoking HGSL IOCTL context create. | ||||
CVE-2024-21481 | 1 Qualcomm | 333 Aqt1000, Aqt1000 Firmware, Ar8035 and 330 more | 2025-08-11 | 8.4 High |
Memory corruption when preparing a shared memory notification for a memparcel in Resource Manager. | ||||
CVE-2024-23369 | 1 Qualcomm | 237 Ar8035, Ar8035 Firmware, Fastconnect 6200 and 234 more | 2025-08-11 | 7.8 High |
Memory corruption when invalid length is provided from HLOS for FRS/UDS request/response buffers. | ||||
CVE-2024-33038 | 1 Qualcomm | 96 Fastconnect 6700, Fastconnect 6700 Firmware, Fastconnect 6900 and 93 more | 2025-08-11 | 7.8 High |
Memory corruption while passing untrusted/corrupted pointers from DSP to EVA. | ||||
CVE-2024-33042 | 1 Qualcomm | 456 205, 205 Firmware, 215 and 453 more | 2025-08-11 | 7.8 High |
Memory corruption when Alternative Frequency offset value is set to 255. | ||||
CVE-2024-33047 | 1 Qualcomm | 50 Fastconnect 6700, Fastconnect 6700 Firmware, Fastconnect 6900 and 47 more | 2025-08-11 | 8.4 High |
Memory corruption when the captureRead QDCM command is invoked from user-space. | ||||
CVE-2024-33048 | 1 Qualcomm | 394 Ar8035, Ar8035 Firmware, Csr8811 and 391 more | 2025-08-11 | 7.5 High |
Transient DOS while parsing the received TID-to-link mapping element of beacon/probe response frame. | ||||
CVE-2024-43051 | 1 Qualcomm | 488 Aqt1000, Aqt1000 Firmware, Ar8031 and 485 more | 2025-08-11 | 5.5 Medium |
Information disclosure while deriving keys for a session for any Widevine use case. | ||||
CVE-2024-49839 | 1 Qualcomm | 372 Ar8035, Ar8035 Firmware, Csr8811 and 369 more | 2025-08-11 | 8.2 High |
Memory corruption during management frame processing due to mismatch in T2LM info element. | ||||
CVE-2025-21450 | 1 Qualcomm | 217 Ar8035, Ar8035 Firmware, Fastconnect 6200 and 214 more | 2025-08-11 | 9.1 Critical |
Cryptographic issue occurs due to use of insecure connection method while downloading. | ||||
CVE-2025-21454 | 1 Qualcomm | 385 315 5g Iot Modem, 315 5g Iot Modem Firmware, 9206 Lte Modem and 382 more | 2025-08-11 | 7.5 High |
Transient DOS while processing received beacon frame. | ||||
CVE-2025-21467 | 1 Qualcomm | 212 215 Mobile, 215 Mobile Firmware, Csra6620 and 209 more | 2025-08-11 | 7.8 High |
Memory corruption while reading the FW response from the shared queue. | ||||
CVE-2025-21468 | 1 Qualcomm | 302 Ar8035, Ar8035 Firmware, Csra6620 and 299 more | 2025-08-11 | 7.8 High |
Memory corruption while reading response from FW, when buffer size is changed by FW while driver is using this size to write null character at the end of buffer. | ||||
CVE-2025-27057 | 1 Qualcomm | 424 Ar8035, Ar8035 Firmware, Csr8811 and 421 more | 2025-08-11 | 7.5 High |
Transient DOS while handling beacon frames with invalid IE header length. |