Search Results (226 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-21448 1 Qualcomm 538 315 5g Iot Modem, 315 5g Iot Modem Firmware, Aqt1000 and 535 more 2025-10-06 7.5 High
Transient DOS may occur while parsing SSID in action frames.
CVE-2025-21430 1 Qualcomm 450 315 5g Iot Modem, 315 5g Iot Modem Firmware, Apq8017 and 447 more 2025-10-06 7.5 High
Transient DOS while connecting STA to AP and initiating ADD TS request from AP to establish TSpec session.
CVE-2024-33016 1 Qualcomm 669 315 5g Iot Modem, 315 5g Iot Modem Firmware, 9205 Lte Modem and 666 more 2025-10-03 6.8 Medium
memory corruption when an invalid firehose patch command is invoked.
CVE-2024-23364 1 Qualcomm 359 Ar8035, Ar8035 Firmware, Fastconnect 6200 and 356 more 2025-10-03 7.5 High
Transient DOS when processing the non-transmitted BSSID profile sub-elements present within the MBSSID Information Element (IE) of a beacon frame that is received from over-the-air (OTA).
CVE-2024-23359 1 Qualcomm 324 205 Mobile Platform, 205 Mobile Platform Firmware, 315 5g Iot Modem and 321 more 2025-10-03 8.2 High
Information disclosure while decoding Tracking Area Update Accept or Attach Accept message received from network.
CVE-2025-27042 1 Qualcomm 689 215 Mobile, 215 Mobile Firmware, 315 5g Iot Modem and 686 more 2025-09-25 7.8 High
Memory corruption while processing video packets received from video firmware.
CVE-2025-27030 1 Qualcomm 83 C-v2x 9150, C-v2x 9150 Firmware, Qam8295p and 80 more 2025-09-25 6.1 Medium
information disclosure while invoking calibration data from user space to update firmware size.
CVE-2025-21477 1 Qualcomm 179 315 5g Iot Modem, 315 5g Iot Modem Firmware, Ar8035 and 176 more 2025-08-20 7.5 High
Transient DOS while processing CCCH data when NW sends data with invalid length.
CVE-2025-21452 1 Qualcomm 161 315 5g Iot Modem, 315 5g Iot Modem Firmware, Ar8035 and 158 more 2025-08-20 7.5 High
Transient DOS while processing a random-access response (RAR) with an invalid PDU length on LTE network.
CVE-2024-21459 1 Qualcomm 352 Ar8035, Ar8035 Firmware, Ar9380 and 349 more 2025-08-15 6.5 Medium
Information disclosure while handling beacon or probe response frame in STA.
CVE-2024-33049 1 Qualcomm 262 Csr8811, Csr8811 Firmware, Fastconnect 6700 and 259 more 2025-08-11 7.5 High
Transient DOS while parsing noninheritance IE of Extension element when length of IE is 2 of beacon frame.
CVE-2023-33035 1 Qualcomm 288 Apq5053-aa, Apq5053-aa Firmware, Ar8035 and 285 more 2025-08-11 7.8 High
Memory corruption while invoking callback function of AFE from ADSP.
CVE-2023-28569 1 Qualcomm 416 Aqt1000, Aqt1000 Firmware, Ar9380 and 413 more 2025-08-11 6.1 Medium
Information disclosure in WLAN HAL while handling command through WMI interfaces.
CVE-2023-33023 1 Qualcomm 636 215 Mobile, 215 Mobile Firmware, 315 5g Iot and 633 more 2025-08-11 8.4 High
Memory corruption while processing finish_sign command to pass a rsp buffer.
CVE-2023-33022 1 Qualcomm 424 315 5g Iot Modem, 315 5g Iot Modem Firmware, Apq5053-aa and 421 more 2025-08-11 8.4 High
Memory corruption in HLOS while invoking IOCTL calls from user-space.
CVE-2023-28547 1 Qualcomm 667 215 Mobile, 215 Mobile Firmware, 315 5g Iot and 664 more 2025-08-11 8.4 High
Memory corruption in SPS Application while requesting for public key in sorter TA.
CVE-2023-33017 1 Qualcomm 554 315 5g Iot Modem, 315 5g Iot Modem Firmware, 9205 Lte Modem and 551 more 2025-08-11 7.8 High
Memory corruption in Boot while running a ListVars test in UEFI Menu during boot.
CVE-2023-43529 1 Qualcomm 322 315 5g Iot Modem, 315 5g Iot Modem Firmware, Aqt1000 and 319 more 2025-08-11 7.5 High
Transient DOS while processing IKEv2 Informational request messages, when a malformed fragment packet is received.
CVE-2023-43536 1 Qualcomm 618 315 5g Iot Modem, 315 5g Iot Modem Firmware, Aqt1000 and 615 more 2025-08-11 7.5 High
Transient DOS while parse fils IE with length equal to 1.
CVE-2023-43513 1 Qualcomm 534 315 5g Iot Modem, 315 5g Iot Modem Firmware, Apq8017 and 531 more 2025-08-11 7.8 High
Memory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may point to address in the middle of ring element.