Skip to contentQualcomm Snapdragon 6 Gen 4 Mobile Platform Firmware vulnerabilities
- qualcomm ar8031 firmware, ar8035 firmware, csra6620 firmware +216 more +218 moreUse After Free in DSP ServiceCVE-2026-57554Fix available7.8 High
- qualcomm ar8031 firmware, cologne firmware, congo firmware +215 more +217 moreUntrusted Pointer Dereference in GraphicsCVE-2026-57545Fix available7.8 High
- qualcomm ar8035 firmware, cologne firmware, cq2390m firmware +290 more +292 moreImproper Verification of Cryptographic Signature in BootCVE-2026-253027.1 High
- qualcomm cologne firmware, cq2390m firmware, cq2390s firmware +153 more +155 moreOut-of-bounds Write in Camera DriverCVE-2026-252726.7 Medium
- qualcomm cologne firmware, congo firmware, cq2390m firmware +201 more +203 moreOut-of-bounds Write in Camera DriverCVE-2026-252706.7 Medium
- qualcomm cologne firmware, cq2390m firmware, cq2390s firmware +154 more +156 moreOut-of-bounds Write in Camera DriverCVE-2026-252696.7 Medium
- qualcomm 5g fixed wireless access platform firmware, aqt1000 firmware, ar8031 firmware +374 more +376 moreBuffer Over-read in WLAN FirmwareCVE-2026-252757.5 High
- qualcomm ar8035 firmware, c110100 firmware, cologne firmware +150 more +152 moreBuffer Over-read in BT ControllerCVE-2026-240817.4 High
- qualcomm ar8035 firmware, cologne firmware, cq7790 firmware +199 more +201 moreStack-based Buffer Overflow in WLAN FirmwareCVE-2026-252899.6 Critical
- qualcomm 5g fixed wireless access platform firmware, aqt1000 firmware, ar8035 firmware +126 more +128 moreInsecure Security Identifier Mechanism in Multi-Mode Call ProcessorCVE-2026-240847.5 High
- qualcomm ar8035 firmware, csra6620 firmware, csra6640 firmware +141 more +143 moreMissing Authentication for Critical Function in Data ModemCVE-2026-240798.1 High
- qualcomm 5g fixed wireless access platform firmware, ar8035 firmware, csra6620 firmware +145 more +147 moreExposure of Private Personal Information to an Unauthorized Actor in Data ModemCVE-2026-240786.5 Medium
- qualcomm ar8031 firmware, ar8035 firmware, cologne firmware +216 more +218 moreImproper Validation of Syntactic Correctness of Input in DisplayCVE-2026-24092Fix available7.2 High
- qualcomm 5g fixed wireless access platform firmware, apq8098 firmware, ar8031 firmware +271 more +273 moreImproper Validation of Syntactic Correctness of Input in DisplayCVE-2026-24091Fix available7.2 High
- qualcomm ar8031 firmware, ar8035 firmware, cologne firmware +215 more +217 moreMissing Authentication for Critical Function in HLOSCVE-2026-24090Public exploitFix available7.1 High
- qualcomm ar9380 firmware, csr8811 firmware, fastconnect 6200 firmware +244 more +246 moreMissing Authentication for Critical Function in BootCVE-2026-24088Public exploitFix available8.2 High
- qualcomm ar8031 firmware, ar8035 firmware, cologne firmware +213 more +215 moreImproper Validation of Syntactic Correctness of Input in KernelCVE-2026-24087Fix available7.2 High
- qualcomm 5g fixed wireless access platform firmware, c-v2x 9150 firmware, cq7790 firmware +234 more +236 moreTime-of-check Time-of-use (TOCTOU) Race Condition in Camera DriverCVE-2025-596106.4 Medium
- qualcomm ar8035 firmware, cologne firmware, cq7790 firmware +263 more +265 moreNULL Pointer Dereference in SPS ApplicationsCVE-2025-596047.8 High
- qualcomm ar8031 firmware, ar8035 firmware, cologne firmware +217 more +219 moreImproper Validation of Syntactic Correctness of Input in KernelCVE-2026-24089Fix available7.2 High
- qualcomm 5g fixed wireless access platform firmware, apq8098 firmware, ar8031 firmware +271 more +273 moreStack-based Buffer Overflow in DisplayCVE-2026-24085Fix available7.2 High
- qualcomm aqt1000 firmware, ar8035 firmware, csra6620 firmware +142 more +144 moreInteger Underflow (Wrap or Wraparound) in WLAN HostCVE-2026-24077Fix available6.5 Medium
- qualcomm 5g fixed wireless access platform firmware, ar8035 firmware, csr8811 firmware +185 more +187 moreBuffer Over-read in WLAN Host CommunicationCVE-2025-59609Fix available5.5 Medium
- qualcomm ar8035 firmware, cologne firmware, fastconnect 6200 firmware +101 more +103 moreBuffer Over-read in WLAN FirmwareCVE-2026-213817.6 High
- qualcomm ar8035 firmware, cologne firmware, csr8811 firmware +148 more +150 moreBuffer Over-read in WLAN FirmwareCVE-2026-213677.6 High
- qualcomm 5g fixed wireless access platform firmware, ar8035 firmware, csra6620 firmware +152 more +154 moreInteger Overflow or Wraparound in GPSCVE-2025-473928.8 High
- qualcomm fastconnect 6200 firmware, fastconnect 6700 firmware, fastconnect 6900 firmware +99 more +101 moreStack-based Buffer Overflow in Camera DriverCVE-2025-473917.8 High
- qualcomm ar8035 firmware, cologne firmware, csra6620 firmware +179 more +181 moreBuffer Copy Without Checking Size of Input in Automotive PlatformCVE-2025-473897.8 High
- qualcomm ar8031 firmware, ar8035 firmware, csra6620 firmware +168 more +170 moreUse After Free in Automotive AudioCVE-2025-473867.8 High
- qualcomm fastconnect 6200 firmware, fastconnect 6700 firmware, fastconnect 6900 firmware +92 more +94 moreImproper Access Control for Register Interface in SCE-MinkCVE-2025-473857.8 High
- qualcomm 5g fixed wireless access platform firmware, 9206 lte modem firmware, 9207 lte modem firmware +204 more +206 moreMissing Cryptographic Step in Data ModemCVE-2025-473837.2 High
- qualcomm 5g fixed wireless access platform firmware, ar8031 firmware, ar8035 firmware +176 more +178 moreUse After Free in Automotive AudioCVE-2025-473797.8 High
- qualcomm ar8035 firmware, fastconnect 6200 firmware, fastconnect 6900 firmware +120 more +122 moreUse After Free in Automotive AudioCVE-2025-473777.8 High
- qualcomm ar8031 firmware, ar8035 firmware, csra6620 firmware +168 more +170 moreUse After Free in Automotive AudioCVE-2025-473767.8 High
- qualcomm ar8031 firmware, ar8035 firmware, csra6620 firmware +167 more +169 moreUse After Free in Automotive AudioCVE-2025-473757.8 High
- qualcomm ar8035 firmware, cologne firmware, fastconnect 6200 firmware +186 more +188 moreOut-of-bounds Write in AutomotiveCVE-2025-473737.8 High
- qualcomm 5g fixed wireless access platform firmware, ar8035 firmware, csra6620 firmware +123 more +125 moreReachable Assertion in ModemCVE-2025-473716.5 Medium
- qualcomm 5g fixed wireless access platform firmware, apq8098 firmware, ar8031 firmware +236 more +238 moreInteger Overflow or Wraparound in GraphicsCVE-2026-21385In KEVPublic exploitFix available7.8 High
- qualcomm ar8031 firmware, ar8035 firmware, csra6620 firmware +162 more +164 moreBuffer Over-read in GraphicsCVE-2025-59600Fix available7.8 High