Skip to content
Qualcomm Milos Firmware vulnerabilities
-
qualcomm ar8031 firmware, ar8035 firmware, csra6620 firmware +216 more +218 more
Use After Free in DSP Service
CVE-2026-57554
Fix available
7.8 High
-
qualcomm ar8031 firmware, cologne firmware, congo firmware +215 more +217 more
Untrusted Pointer Dereference in Graphics
CVE-2026-57545
Fix available
7.8 High
-
qualcomm ar8035 firmware, cologne firmware, cq2390m firmware +290 more +292 more
Improper Verification of Cryptographic Signature in Boot
CVE-2026-25302
7.1 High
-
qualcomm cologne firmware, cq2390m firmware, cq2390s firmware +153 more +155 more
Out-of-bounds Write in Camera Driver
CVE-2026-25272
6.7 Medium
-
qualcomm cologne firmware, congo firmware, cq2390m firmware +201 more +203 more
Out-of-bounds Write in Camera Driver
CVE-2026-25270
6.7 Medium
-
qualcomm cologne firmware, cq2390m firmware, cq2390s firmware +154 more +156 more
Out-of-bounds Write in Camera Driver
CVE-2026-25269
6.7 Medium
-
qualcomm 5g fixed wireless access platform firmware, aqt1000 firmware, ar8031 firmware +374 more +376 more
Buffer Over-read in WLAN Firmware
CVE-2026-25275
7.5 High
-
qualcomm ar8035 firmware, c110100 firmware, cologne firmware +150 more +152 more
Buffer Over-read in BT Controller
CVE-2026-24081
7.4 High
-
qualcomm ar8035 firmware, cologne firmware, cq7790 firmware +199 more +201 more
Stack-based Buffer Overflow in WLAN Firmware
CVE-2026-25289
9.6 Critical
-
qualcomm 5g fixed wireless access platform firmware, aqt1000 firmware, ar8035 firmware +126 more +128 more
Insecure Security Identifier Mechanism in Multi-Mode Call Processor
CVE-2026-24084
7.5 High
-
qualcomm ar8035 firmware, csra6620 firmware, csra6640 firmware +141 more +143 more
Missing Authentication for Critical Function in Data Modem
CVE-2026-24079
8.1 High
-
qualcomm 5g fixed wireless access platform firmware, ar8035 firmware, csra6620 firmware +145 more +147 more
Exposure of Private Personal Information to an Unauthorized Actor in Data Modem
CVE-2026-24078
6.5 Medium
-
qualcomm ar8031 firmware, ar8035 firmware, cologne firmware +216 more +218 more
Improper Validation of Syntactic Correctness of Input in Display
CVE-2026-24092
Fix available
7.2 High
-
qualcomm 5g fixed wireless access platform firmware, apq8098 firmware, ar8031 firmware +271 more +273 more
Improper Validation of Syntactic Correctness of Input in Display
CVE-2026-24091
Fix available
7.2 High
-
qualcomm ar8031 firmware, ar8035 firmware, cologne firmware +215 more +217 more
Missing Authentication for Critical Function in HLOS
CVE-2026-24090
Public exploitFix available
7.1 High
-
qualcomm ar9380 firmware, csr8811 firmware, fastconnect 6200 firmware +244 more +246 more
Missing Authentication for Critical Function in Boot
CVE-2026-24088
Public exploitFix available
8.2 High
-
qualcomm ar8031 firmware, ar8035 firmware, cologne firmware +213 more +215 more
Improper Validation of Syntactic Correctness of Input in Kernel
CVE-2026-24087
Fix available
7.2 High
-
qualcomm 5g fixed wireless access platform firmware, c-v2x 9150 firmware, cq7790 firmware +234 more +236 more
Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver
CVE-2025-59610
6.4 Medium
-
qualcomm ar8035 firmware, cologne firmware, cq7790 firmware +263 more +265 more
NULL Pointer Dereference in SPS Applications
CVE-2025-59604
7.8 High
-
qualcomm ar8031 firmware, ar8035 firmware, cologne firmware +217 more +219 more
Improper Validation of Syntactic Correctness of Input in Kernel
CVE-2026-24089
Fix available
7.2 High
-
qualcomm 5g fixed wireless access platform firmware, apq8098 firmware, ar8031 firmware +271 more +273 more
Stack-based Buffer Overflow in Display
CVE-2026-24085
Fix available
7.2 High
-
qualcomm aqt1000 firmware, ar8035 firmware, csra6620 firmware +142 more +144 more
Integer Underflow (Wrap or Wraparound) in WLAN Host
CVE-2026-24077
Fix available
6.5 Medium
-
qualcomm 5g fixed wireless access platform firmware, ar8035 firmware, csr8811 firmware +185 more +187 more
Buffer Over-read in WLAN Host Communication
CVE-2025-59609
Fix available
5.5 Medium
-
qualcomm ar8031 firmware, ar8035 firmware, csra6620 firmware +174 more +176 more
Use After Free in Automotive GPU
CVE-2026-24082
7.8 High
-
qualcomm 215 mobile firmware, 5g fixed wireless access firmware, ar8031 firmware +186 more +188 more
Buffer Copy Without Checking Size of Input in Automotive Audio
CVE-2025-47404
6.5 Medium
-
qualcomm ar8035 firmware, cologne firmware, cq7790 firmware +255 more +257 more
Buffer Over-read in WLAN Firmware
CVE-2025-47403
6.5 Medium
-
qualcomm ar8035 firmware, cologne firmware, cq7790 firmware +243 more +245 more
Buffer Over-read in WLAN HAL
CVE-2025-47401
6.5 Medium
-
qualcomm ar8035 firmware, cologne firmware, fastconnect 6200 firmware +101 more +103 more
Buffer Over-read in WLAN Firmware
CVE-2026-21381
7.6 High
-
qualcomm ar8035 firmware, cologne firmware, csr8811 firmware +148 more +150 more
Buffer Over-read in WLAN Firmware
CVE-2026-21367
7.6 High
-
qualcomm 5g fixed wireless access platform firmware, ar8035 firmware, csra6620 firmware +152 more +154 more
Integer Overflow or Wraparound in GPS
CVE-2025-47392
8.8 High
-
qualcomm fastconnect 6200 firmware, fastconnect 6700 firmware, fastconnect 6900 firmware +99 more +101 more
Stack-based Buffer Overflow in Camera Driver
CVE-2025-47391
7.8 High
-
qualcomm ar8035 firmware, cologne firmware, csra6620 firmware +179 more +181 more
Buffer Copy Without Checking Size of Input in Automotive Platform
CVE-2025-47389
7.8 High
-
qualcomm ar8031 firmware, ar8035 firmware, csra6620 firmware +168 more +170 more
Use After Free in Automotive Audio
CVE-2025-47386
7.8 High
-
qualcomm fastconnect 6200 firmware, fastconnect 6700 firmware, fastconnect 6900 firmware +92 more +94 more
Improper Access Control for Register Interface in SCE-Mink
CVE-2025-47385
7.8 High
-
qualcomm 5g fixed wireless access platform firmware, 9206 lte modem firmware, 9207 lte modem firmware +204 more +206 more
Missing Cryptographic Step in Data Modem
CVE-2025-47383
7.2 High
-
qualcomm 5g fixed wireless access platform firmware, ar8031 firmware, ar8035 firmware +176 more +178 more
Use After Free in Automotive Audio
CVE-2025-47379
7.8 High
-
qualcomm ar8035 firmware, fastconnect 6200 firmware, fastconnect 6900 firmware +120 more +122 more
Use After Free in Automotive Audio
CVE-2025-47377
7.8 High
-
qualcomm ar8031 firmware, ar8035 firmware, csra6620 firmware +168 more +170 more
Use After Free in Automotive Audio
CVE-2025-47376
7.8 High
-
qualcomm ar8031 firmware, ar8035 firmware, csra6620 firmware +167 more +169 more
Use After Free in Automotive Audio
CVE-2025-47375
7.8 High
-
qualcomm ar8035 firmware, cologne firmware, fastconnect 6200 firmware +186 more +188 more
Out-of-bounds Write in Automotive
CVE-2025-47373
7.8 High
-
qualcomm 5g fixed wireless access platform firmware, ar8035 firmware, csra6620 firmware +123 more +125 more
Reachable Assertion in Modem
CVE-2025-47371
6.5 Medium
-
qualcomm 5g fixed wireless access platform firmware, apq8098 firmware, ar8031 firmware +236 more +238 more
Integer Overflow or Wraparound in Graphics
CVE-2026-21385
In KEVPublic exploitFix available
7.8 High
-
qualcomm ar8031 firmware, ar8035 firmware, csra6620 firmware +162 more +164 more
Buffer Over-read in Graphics
CVE-2025-59600
Fix available
7.8 High
-
qualcomm ar8031 firmware, csra6620 firmware, csra6640 firmware +151 more +153 more
Use After Free in Graphics
CVE-2025-47398
Fix available
7.8 High
-
qualcomm ar8031 firmware, csra6620 firmware, csra6640 firmware +145 more +147 more
Improper Release of Memory Before Removing Last Reference in Graphics
CVE-2025-47397
Fix available
7.8 High