Skip to contentQualcomm Sm6225p Firmware vulnerabilities
- qualcomm ar8031 firmware, ar8035 firmware, csra6620 firmware +216 more +218 moreUse After Free in DSP ServiceCVE-2026-57554Fix available7.8 High
- qualcomm ar8031 firmware, cologne firmware, congo firmware +215 more +217 moreUntrusted Pointer Dereference in GraphicsCVE-2026-57545Fix available7.8 High
- qualcomm ar8035 firmware, cologne firmware, cq2390m firmware +290 more +292 moreImproper Verification of Cryptographic Signature in BootCVE-2026-253027.1 High
- qualcomm cq8845s firmware, cq8850ns firmware, fastconnect 6200 firmware +111 more +113 moreUse After Free in GraphicsCVE-2026-25291Fix available7.8 High
- qualcomm cologne firmware, congo firmware, cq2390m firmware +201 more +203 moreOut-of-bounds Write in Camera DriverCVE-2026-252706.7 Medium
- qualcomm 5g fixed wireless access platform firmware, 9205 lte modem firmware, 9205s modem firmware +164 more +166 moreMissing Authorization in CoreCVE-2026-252677.8 High
- qualcomm 5g fixed wireless access platform firmware, 9205 lte modem firmware, 9205s modem firmware +164 more +166 moreOut of Bounds write in Linux CameraCVE-2026-252636.6 Medium
- qualcomm 5g fixed wireless access platform firmware, aqt1000 firmware, ar8031 firmware +374 more +376 moreBuffer Over-read in WLAN FirmwareCVE-2026-252757.5 High
- qualcomm ar8031 firmware, ar8035 firmware, cq7790 firmware +209 more +211 moreImproper Validation of Syntactic Correctness of Input in Automotive Linux OSCVE-2026-252927.6 High
- qualcomm ar8035 firmware, csra6620 firmware, csra6640 firmware +141 more +143 moreMissing Authentication for Critical Function in Data ModemCVE-2026-240798.1 High
- qualcomm 5g fixed wireless access platform firmware, ar8035 firmware, csra6620 firmware +145 more +147 moreExposure of Private Personal Information to an Unauthorized Actor in Data ModemCVE-2026-240786.5 Medium
- qualcomm fastconnect 6200 firmware, fastconnect 6700 firmware, fastconnect 6900 firmware +107 more +109 moreOut-of-bounds Write in Camera DriverCVE-2026-213695.3 Medium
- qualcomm ar8031 firmware, ar8035 firmware, cologne firmware +216 more +218 moreImproper Validation of Syntactic Correctness of Input in DisplayCVE-2026-24092Fix available7.2 High
- qualcomm 5g fixed wireless access platform firmware, apq8098 firmware, ar8031 firmware +271 more +273 moreImproper Validation of Syntactic Correctness of Input in DisplayCVE-2026-24091Fix available7.2 High
- qualcomm ar8031 firmware, ar8035 firmware, cologne firmware +215 more +217 moreMissing Authentication for Critical Function in HLOSCVE-2026-24090Public exploitFix available7.1 High
- qualcomm ar9380 firmware, csr8811 firmware, fastconnect 6200 firmware +244 more +246 moreMissing Authentication for Critical Function in BootCVE-2026-24088Public exploitFix available8.2 High
- qualcomm ar8031 firmware, ar8035 firmware, cologne firmware +213 more +215 moreImproper Validation of Syntactic Correctness of Input in KernelCVE-2026-24087Fix available7.2 High
- qualcomm 5g fixed wireless access platform firmware, c-v2x 9150 firmware, cq7790 firmware +234 more +236 moreTime-of-check Time-of-use (TOCTOU) Race Condition in Camera DriverCVE-2025-596106.4 Medium
- qualcomm ar8035 firmware, cologne firmware, cq7790 firmware +263 more +265 moreNULL Pointer Dereference in SPS ApplicationsCVE-2025-596047.8 High
- qualcomm ar8031 firmware, ar8035 firmware, cologne firmware +217 more +219 moreImproper Validation of Syntactic Correctness of Input in KernelCVE-2026-24089Fix available7.2 High
- qualcomm 5g fixed wireless access platform firmware, apq8098 firmware, ar8031 firmware +271 more +273 moreStack-based Buffer Overflow in DisplayCVE-2026-24085Fix available7.2 High
- qualcomm aqt1000 firmware, ar8035 firmware, csra6620 firmware +142 more +144 moreInteger Underflow (Wrap or Wraparound) in WLAN HostCVE-2026-24077Fix available6.5 Medium
- qualcomm ar8031 firmware, ar8035 firmware, csra6620 firmware +174 more +176 moreUse After Free in Automotive GPUCVE-2026-240827.8 High
- qualcomm cq7790 firmware, cq8725s firmware, fastconnect 6200 firmware +98 more +100 moreTime-of-check Time-of-use (TOCTOU) Race Condition in DSP ServiceCVE-2025-474077.8 High
- qualcomm 215 mobile firmware, 5g fixed wireless access firmware, ar8031 firmware +186 more +188 moreBuffer Copy Without Checking Size of Input in Automotive AudioCVE-2025-474046.5 Medium
- qualcomm 5g fixed wireless access platform firmware, ar8035 firmware, csra6620 firmware +152 more +154 moreInteger Overflow or Wraparound in GPSCVE-2025-473928.8 High
- qualcomm ar8031 firmware, ar8035 firmware, csra6620 firmware +168 more +170 moreUse After Free in Automotive AudioCVE-2025-473867.8 High
- qualcomm 5g fixed wireless access platform firmware, 9206 lte modem firmware, 9207 lte modem firmware +204 more +206 moreMissing Cryptographic Step in Data ModemCVE-2025-473837.2 High
- qualcomm 5g fixed wireless access platform firmware, ar8031 firmware, ar8035 firmware +176 more +178 moreUse After Free in Automotive AudioCVE-2025-473797.8 High
- qualcomm ar8035 firmware, fastconnect 6200 firmware, fastconnect 6900 firmware +120 more +122 moreUse After Free in Automotive AudioCVE-2025-473777.8 High
- qualcomm ar8031 firmware, ar8035 firmware, csra6620 firmware +168 more +170 moreUse After Free in Automotive AudioCVE-2025-473767.8 High
- qualcomm ar8031 firmware, ar8035 firmware, csra6620 firmware +167 more +169 moreUse After Free in Automotive AudioCVE-2025-473757.8 High
- qualcomm ar8035 firmware, cologne firmware, fastconnect 6200 firmware +186 more +188 moreOut-of-bounds Write in AutomotiveCVE-2025-473737.8 High
- qualcomm 5g fixed wireless access platform firmware, ar8035 firmware, csra6620 firmware +123 more +125 moreReachable Assertion in ModemCVE-2025-473716.5 Medium
- qualcomm 5g fixed wireless access platform firmware, apq8098 firmware, ar8031 firmware +236 more +238 moreInteger Overflow or Wraparound in GraphicsCVE-2026-21385In KEVPublic exploitFix available7.8 High
- qualcomm ar8031 firmware, ar8035 firmware, csra6620 firmware +162 more +164 moreBuffer Over-read in GraphicsCVE-2025-59600Fix available7.8 High
- qualcomm ar8031 firmware, csra6620 firmware, csra6640 firmware +151 more +153 moreUse After Free in GraphicsCVE-2025-47398Fix available7.8 High
- qualcomm ar8031 firmware, csra6620 firmware, csra6640 firmware +145 more +147 moreImproper Release of Memory Before Removing Last Reference in GraphicsCVE-2025-47397Fix available7.8 High
- qualcomm ar8035 firmware, fastconnect 6200 firmware, fastconnect 6700 firmware +157 more +159 moreExposed Dangerous Method or Function in HLOSCVE-2025-473667.1 High
- qualcomm ar8035 firmware, csra6620 firmware, csra6640 firmware +173 more +175 moreInformation Exposure in Computer VisionCVE-2025-473695.5 Medium
- qualcomm aqt1000 firmware, ar8035 firmware, csra6620 firmware +202 more +204 moreUse of Uninitialized Variable in HLOSCVE-2025-473487.8 High
- qualcomm csra6620 firmware, csra6640 firmware, fastconnect 6200 firmware +144 more +146 moreBuffer Copy Without Checking Size of Input in Camera DriverCVE-2025-473346.7 Medium
- qualcomm aqt1000 firmware, ar8031 firmware, ar8035 firmware +237 more +239 moreUse After Free in HLOSCVE-2025-473336.6 Medium
- qualcomm ar8031 firmware, ar8035 firmware, csr8811 firmware +297 more +299 moreBuffer Over-read in VideoCVE-2025-473316.1 Medium
- qualcomm ar8031 firmware, ar8035 firmware, c-v2x 9150 firmware +221 more +223 moreBuffer Over-read in VideoCVE-2025-473305.5 Medium
- qualcomm 315 5g iot modem firmware, 9205 lte modem firmware, aqt1000 firmware +297 more +299 moreOut-of-bounds Write in DisplayCVE-2025-270547.8 High
- qualcomm 215 mobile platform firmware, 315 5g iot modem firmware, 9205 lte modem firmware +317 more +319 moreIncorrect Calculation of Buffer Size in HLOSCVE-2025-270537.8 High