Skip to contentQualcomm Snapdragon 7 Gen 1 Mobile Platform Firmware vulnerabilities
- qualcomm ar8031 firmware, ar8035 firmware, csra6620 firmware +216 more +218 moreUse After Free in DSP ServiceCVE-2026-57554Fix available7.8 High
- qualcomm ar8031 firmware, cologne firmware, congo firmware +215 more +217 moreUntrusted Pointer Dereference in GraphicsCVE-2026-57545Fix available7.8 High
- qualcomm ar8035 firmware, cologne firmware, cq2390m firmware +290 more +292 moreImproper Verification of Cryptographic Signature in BootCVE-2026-253027.1 High
- qualcomm cologne firmware, cq2390m firmware, cq2390s firmware +153 more +155 moreOut-of-bounds Write in Camera DriverCVE-2026-252726.7 Medium
- qualcomm cologne firmware, congo firmware, cq2390m firmware +201 more +203 moreOut-of-bounds Write in Camera DriverCVE-2026-252706.7 Medium
- qualcomm cologne firmware, cq2390m firmware, cq2390s firmware +154 more +156 moreOut-of-bounds Write in Camera DriverCVE-2026-252696.7 Medium
- qualcomm 5g fixed wireless access platform firmware, 9205 lte modem firmware, 9205s modem firmware +164 more +166 moreMissing Authorization in CoreCVE-2026-252677.8 High
- qualcomm 5g fixed wireless access platform firmware, 9205 lte modem firmware, 9205s modem firmware +164 more +166 moreOut of Bounds write in Linux CameraCVE-2026-252636.6 Medium
- qualcomm 5g fixed wireless access platform firmware, aqt1000 firmware, ar8031 firmware +374 more +376 moreBuffer Over-read in WLAN FirmwareCVE-2026-252757.5 High
- qualcomm 5g fixed wireless access platform firmware, aqt1000 firmware, ar8035 firmware +126 more +128 moreInsecure Security Identifier Mechanism in Multi-Mode Call ProcessorCVE-2026-240847.5 High
- qualcomm ar8035 firmware, csra6620 firmware, csra6640 firmware +141 more +143 moreMissing Authentication for Critical Function in Data ModemCVE-2026-240798.1 High
- qualcomm 5g fixed wireless access platform firmware, ar8035 firmware, csra6620 firmware +145 more +147 moreExposure of Private Personal Information to an Unauthorized Actor in Data ModemCVE-2026-240786.5 Medium
- qualcomm fastconnect 6700 firmware, fastconnect 6900 firmware, fastconnect 7800 firmware +77 more +79 moreOut-of-bounds Write in Camera DriverCVE-2026-213845.3 Medium
- qualcomm fastconnect 6700 firmware, fastconnect 6900 firmware, fastconnect 7800 firmware +89 more +91 moreOut-of-bounds Write in Camera DriverCVE-2026-213705.3 Medium
- qualcomm fastconnect 6700 firmware, fastconnect 6900 firmware, fastconnect 7800 firmware +89 more +91 moreOut-of-bounds Write in Camera DriverCVE-2026-213685.3 Medium
- qualcomm 5g fixed wireless access platform firmware, apq8098 firmware, ar8031 firmware +271 more +273 moreImproper Validation of Syntactic Correctness of Input in DisplayCVE-2026-24091Fix available7.2 High
- qualcomm ar9380 firmware, csr8811 firmware, fastconnect 6200 firmware +244 more +246 moreMissing Authentication for Critical Function in BootCVE-2026-24088Public exploitFix available8.2 High
- qualcomm 5g fixed wireless access platform firmware, c-v2x 9150 firmware, cq7790 firmware +234 more +236 moreTime-of-check Time-of-use (TOCTOU) Race Condition in Camera DriverCVE-2025-596106.4 Medium
- qualcomm ar8035 firmware, csra6620 firmware, csra6640 firmware +138 more +140 moreOut-of-bounds Write in HLOSCVE-2025-596057.8 High
- qualcomm ar8035 firmware, cologne firmware, cq7790 firmware +263 more +265 moreNULL Pointer Dereference in SPS ApplicationsCVE-2025-596047.8 High
- qualcomm 5g fixed wireless access platform firmware, apq8098 firmware, ar8031 firmware +271 more +273 moreStack-based Buffer Overflow in DisplayCVE-2026-24085Fix available7.2 High
- qualcomm aqt1000 firmware, ar8035 firmware, csra6620 firmware +142 more +144 moreInteger Underflow (Wrap or Wraparound) in WLAN HostCVE-2026-24077Fix available6.5 Medium
- qualcomm ar8035 firmware, cologne firmware, csr8811 firmware +148 more +150 moreBuffer Over-read in WLAN FirmwareCVE-2026-213677.6 High
- qualcomm 5g fixed wireless access platform firmware, ar8035 firmware, csra6620 firmware +152 more +154 moreInteger Overflow or Wraparound in GPSCVE-2025-473928.8 High
- qualcomm fastconnect 6200 firmware, fastconnect 6700 firmware, fastconnect 6900 firmware +99 more +101 moreStack-based Buffer Overflow in Camera DriverCVE-2025-473917.8 High
- qualcomm 5g fixed wireless access platform firmware, 9206 lte modem firmware, 9207 lte modem firmware +204 more +206 moreMissing Cryptographic Step in Data ModemCVE-2025-473837.2 High
- qualcomm ar8035 firmware, cologne firmware, fastconnect 6200 firmware +186 more +188 moreOut-of-bounds Write in AutomotiveCVE-2025-473737.8 High
- qualcomm 5g fixed wireless access platform firmware, ar8035 firmware, csra6620 firmware +123 more +125 moreReachable Assertion in ModemCVE-2025-473716.5 Medium
- qualcomm 5g fixed wireless access platform firmware, apq8098 firmware, ar8031 firmware +236 more +238 moreInteger Overflow or Wraparound in GraphicsCVE-2026-21385In KEVPublic exploitFix available7.8 High
- qualcomm ar8035 firmware, csra6620 firmware, csra6640 firmware +173 more +175 moreInformation Exposure in Computer VisionCVE-2025-473695.5 Medium
- qualcomm aqt1000 firmware, ar8035 firmware, csra6620 firmware +202 more +204 moreUse of Uninitialized Variable in HLOSCVE-2025-473487.8 High
- qualcomm csra6620 firmware, csra6640 firmware, fastconnect 6200 firmware +144 more +146 moreBuffer Copy Without Checking Size of Input in Camera DriverCVE-2025-473346.7 Medium
- qualcomm aqt1000 firmware, ar8031 firmware, ar8035 firmware +237 more +239 moreUse After Free in HLOSCVE-2025-473336.6 Medium
- qualcomm fastconnect 6200 firmware, fastconnect 6700 firmware, fastconnect 6900 firmware +72 more +74 moreTime-of-check Time-of-use (TOCTOU) Race Condition in Camera DriverCVE-2025-473326.7 Medium
- qualcomm ar8031 firmware, ar8035 firmware, csr8811 firmware +297 more +299 moreBuffer Over-read in VideoCVE-2025-473316.1 Medium
- qualcomm ar8031 firmware, ar8035 firmware, c-v2x 9150 firmware +221 more +223 moreBuffer Over-read in VideoCVE-2025-473305.5 Medium
- qualcomm ar8035 firmware, csra6620 firmware, csra6640 firmware +176 more +178 moreInteger Overflow or Wraparound in AudioCVE-2025-473237.8 High
- qualcomm fastconnect 6900 firmware, fastconnect 7800 firmware, sm7435 firmware +22 more +24 moreImproper Authorization in PerformanceCVE-2024-384256.1 Medium
- qualcomm 205 mobile firmware, 215 mobile firmware, apq8017 firmware +248 more +250 moreBuffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in FM HostCVE-2024-33052Fix available7.8 High
- qualcomm 205 mobile platform firmware, 215 mobile platform firmware, apq8017 firmware +201 more +203 moreBuffer Over-read in FM HostCVE-2024-33043Fix available5.5 Medium
- qualcomm 205 firmware, 215 firmware, apq8017 firmware +248 more +250 moreBuffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in FM HostCVE-2024-33042Fix available7.8 High