Skip to contentQualcomm Snapdragon 4 Gen 2 Mobile Firmware vulnerabilities
- qualcomm cq7790 firmware, cq8725s firmware, fastconnect 6200 firmware +98 more +100 moreTime-of-check Time-of-use (TOCTOU) Race Condition in DSP ServiceCVE-2025-474077.8 High
- qualcomm ar8035 firmware, cologne firmware, cq7790 firmware +255 more +257 moreBuffer Over-read in WLAN FirmwareCVE-2025-474036.5 Medium
- qualcomm ar8035 firmware, cologne firmware, cq7790 firmware +243 more +245 moreBuffer Over-read in WLAN HALCVE-2025-474016.5 Medium
- qualcomm ar8031 firmware, csra6620 firmware, csra6640 firmware +151 more +153 moreUse After Free in GraphicsCVE-2025-47398Fix available7.8 High
- qualcomm ar8031 firmware, csra6620 firmware, csra6640 firmware +145 more +147 moreImproper Release of Memory Before Removing Last Reference in GraphicsCVE-2025-47397Fix available7.8 High
- qualcomm ar8035 firmware, fastconnect 6200 firmware, fastconnect 6700 firmware +157 more +159 moreExposed Dangerous Method or Function in HLOSCVE-2025-473667.1 High
- qualcomm 315 5g iot firmware, aqt1000 firmware, ar8031 firmware +342 more +344 moreOut-of-bounds Write in VideoCVE-2025-27061Fix available7.8 High
- qualcomm 215 mobile firmware, 315 5g iot modem firmware, aqt1000 firmware +342 more +344 moreIncorrect Calculation of Buffer Size in VideoCVE-2025-27042Fix available7.8 High
- qualcomm 315 5g iot modem firmware, 9206 lte modem firmware, apq8017 firmware +190 more +192 moreBuffer Over-read in WLAN Embedded SWCVE-2025-214547.5 High
- qualcomm 315 5g iot firmware, apq8017 firmware, apq8064au firmware +183 more +185 moreBuffer Over-read in WLAN Embedded SWCVE-2025-214497.5 High
- qualcomm 215 mobile firmware, apq8017 firmware, apq8037 firmware +273 more +275 moreNULL Pointer Dereference in SPS-HLOSCVE-2025-214336.2 Medium
- qualcomm aqt1000 firmware, ar8035 firmware, csra6620 firmware +244 more +246 moreDouble Free in SPS-HLOSCVE-2025-214327.8 High
- qualcomm 205 mobile firmware, 215 mobile firmware, apq8064au firmware +177 more +179 moreBuffer Over-read in Data HLOS - LNXCVE-2025-214278.2 High
- qualcomm aqt1000 firmware, ar8035 firmware, fastconnect 6200 firmware +219 more +221 moreCryptographic Issues in AutomotiveCVE-2025-214227.1 High
- qualcomm ar8035 firmware, csra6620 firmware, csra6640 firmware +149 more +151 moreOut-of-bounds Write in Computer VisionCVE-2025-21468Fix available7.8 High
- qualcomm 205 mobile firmware, 215 mobile firmware, 315 5g iot modem firmware +264 more +266 moreUse After Free in GPS HLOS DriverCVE-2025-21453Fix available7.8 High
- qualcomm ar8035 firmware, fastconnect 6200 firmware, fastconnect 6700 firmware +167 more +169 moreBuffer Over-read in WLAN HOSTCVE-2024-49838Fix available8.2 High
- qualcomm csra6620 firmware, csra6640 firmware, fastconnect 6200 firmware +125 more +127 moreImproper Validation of Array Index in CameraCVE-2024-49834Fix available7.8 High
- qualcomm fastconnect 6700 firmware, fastconnect 6900 firmware, fastconnect 7800 firmware +78 more +80 moreImproper Validation of Array Index in CameraCVE-2024-49833Fix available7.8 High
- qualcomm ar8035 firmware, fastconnect 6200 firmware, fastconnect 6700 firmware +126 more +128 moreUse After Free in DSP ServicesCVE-2024-45553Fix available7.8 High
- qualcomm ar8035 firmware, csra6620 firmware, csra6640 firmware +189 more +191 moreUse After Free in DSP ServicesCVE-2024-38402Fix available7.8 High
- qualcomm 215 mobile firmware, 315 5g iot firmware, 315 5g iot modem firmware +285 more +287 moreUse After Free in DSP ServiceCVE-2024-33060Fix available8.4 High
- qualcomm 205 mobile firmware, 215 mobile firmware, apq8017 firmware +248 more +250 moreBuffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in FM HostCVE-2024-33052Fix available7.8 High
- qualcomm ar8035 firmware, fastconnect 6700 firmware, fastconnect 6900 firmware +76 more +78 moreBuffer Copy Without Checking Size of Input in HypervisorCVE-2023-435569.3 Critical
- qualcomm 215 mobile firmware, aqt1000 firmware, fastconnect 6200 firmware +137 more +139 moreBuffer Over-read in VideoCVE-2023-435558.2 High
- qualcomm 9205 lte modem firmware, aqt1000 firmware, ar8031 firmware +240 more +242 moreBuffer Copy Without Checking Size of Input in Trusted Execution EnvironmentCVE-2023-435427.8 High
- qualcomm ar8035 firmware, fastconnect 6200 firmware, fastconnect 6700 firmware +113 more +115 moreBuffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in AudioCVE-2024-214807.3 High
- qualcomm ar8035 firmware, fastconnect 6200 firmware, fastconnect 6700 firmware +140 more +142 moreAccess of Uninitialized Pointer in SPS ApplicationsCVE-2023-435318.4 High
- qualcomm fastconnect 6700 firmware, fastconnect 6900 firmware, fastconnect 7800 firmware +80 more +82 moreUse After Free in Graphics LinuxCVE-2024-23354Fix available8.4 High
- qualcomm fastconnect 6200 firmware, fastconnect 6700 firmware, fastconnect 6900 firmware +94 more +96 moreImproper Access Control in Graphics LinuxCVE-2024-23351Fix available8.4 High
- qualcomm 215 mobile firmware, 315 5g iot modem firmware, aqt1000 firmware +234 more +236 moreUse of Out-of-range Pointer Offset in VideoCVE-2024-21475Fix available7.8 High
- qualcomm 205 mobile firmware, 215 mobile firmware, ar8035 firmware +178 more +180 moreUse After Free in Graphics LinuxCVE-2024-21471Fix available8.4 High
- qualcomm ar8035 firmware, fastconnect 6200 firmware, fastconnect 6700 firmware +121 more +123 moreBuffer Copy Without Checking Size of Input in AudioCVE-2024-214637.3 High
- qualcomm 315 5g iot modem firmware, ar8035 firmware, fastconnect 6200 firmware +102 more +104 moreIncorrect Type Conversion or Cast in Multi-Mode Call ProcessorCVE-2023-331017.5 High
- qualcomm ar8035 firmware, fastconnect 6700 firmware, fastconnect 6900 firmware +51 more +53 moreImproper input validation in Multi-Mode Call ProcessorCVE-2023-331007.5 High
- qualcomm 315 5g iot modem firmware, ar8035 firmware, fastconnect 6200 firmware +112 more +114 moreImproper Input Validation in Multi-Mode Call ProcessorCVE-2023-330997.5 High
- qualcomm 215 mobile firmware, 315 5g iot firmware, 315 5g iot modem firmware +344 more +346 moreBuffer Copy without Checking Size of Input (`Classic Buffer Overflow`) in SPS-ApplicationsCVE-2023-330238.4 High
- qualcomm 215 mobile firmware, 315 5g iot firmware, 315 5g iot modem firmware +360 more +362 moreBuffer Copy Without Checking Size of Input in SPS ApplicationsCVE-2023-285478.4 High
- qualcomm aqt1000 firmware, fastconnect 6200 firmware, fastconnect 6700 firmware +165 more +167 moreBuffer Copy Without Checking Size of Input in VideoCVE-2023-435487.3 High
- qualcomm 315 5g iot modem firmware, ar8035 firmware, fastconnect 6200 firmware +120 more +122 moreImproper input Validation in Multi-Mode Call ProcessorCVE-2023-331047.5 High
- qualcomm ar8035 firmware, fastconnect 6700 firmware, fastconnect 6900 firmware +46 more +48 moreImproper Input Validation in Multi-Mode Call ProcessorCVE-2023-331037.5 High
- qualcomm 315 5g iot modem firmware, ar8035 firmware, fastconnect 6200 firmware +120 more +122 moreReachable Assertion in Multi-Mode Call ProcessorCVE-2023-330967.5 High
- qualcomm 315 5g iot modem firmware, ar8035 firmware, fastconnect 6200 firmware +120 more +122 moreReachable Assertion in Multi-Mode Call ProcessorCVE-2023-330957.5 High
- qualcomm ar8035 firmware, fastconnect 6700 firmware, fastconnect 6900 firmware +45 more +47 moreImproper Release of Memory Before Removing Last Reference in Data ModemCVE-2023-330847.5 High
- qualcomm 205 mobile firmware, 215 mobile firmware, 315 5g iot modem firmware +317 more +319 moreUse of Out-of-range Pointer Offset in AudioCVE-2023-330668.4 High
- qualcomm ar8035 firmware, fastconnect 6700 firmware, fastconnect 6900 firmware +47 more +49 moreBuffer Copy Without Checking Size of Input in Data ModemCVE-2023-285829.8 Critical
- qualcomm 315 5g iot modem firmware, aqt1000 firmware, ar8031 firmware +384 more +386 moreImproper Input Validation in ServicesCVE-2023-285789.3 Critical
- qualcomm ar8035 firmware, csra6620 firmware, csra6640 firmware +149 more +151 moreInteger Overflow or Wraparound in Core ServicesCVE-2023-43550Fix available7.8 High