Skip to contentQualcomm Snapdragon 888\+ 5g Mobile Platform Firmware vulnerabilities
- qualcomm ar8031 firmware, ar8035 firmware, csra6620 firmware +216 more +218 moreUse After Free in DSP ServiceCVE-2026-57554Fix available7.8 High
- qualcomm ar8031 firmware, cologne firmware, congo firmware +215 more +217 moreUntrusted Pointer Dereference in GraphicsCVE-2026-57545Fix available7.8 High
- qualcomm ar8035 firmware, cologne firmware, cq2390m firmware +290 more +292 moreImproper Verification of Cryptographic Signature in BootCVE-2026-253027.1 High
- qualcomm cq8845s firmware, cq8850ns firmware, fastconnect 6200 firmware +111 more +113 moreUse After Free in GraphicsCVE-2026-25291Fix available7.8 High
- qualcomm cologne firmware, congo firmware, cq2390m firmware +201 more +203 moreOut-of-bounds Write in Camera DriverCVE-2026-252706.7 Medium
- qualcomm 5g fixed wireless access platform firmware, 9205 lte modem firmware, 9205s modem firmware +164 more +166 moreMissing Authorization in CoreCVE-2026-252677.8 High
- qualcomm 5g fixed wireless access platform firmware, 9205 lte modem firmware, 9205s modem firmware +164 more +166 moreOut of Bounds write in Linux CameraCVE-2026-252636.6 Medium
- qualcomm 5g fixed wireless access platform firmware, aqt1000 firmware, ar8031 firmware +374 more +376 moreBuffer Over-read in WLAN FirmwareCVE-2026-252757.5 High
- qualcomm 5g fixed wireless access platform firmware, aqt1000 firmware, ar8035 firmware +126 more +128 moreInsecure Security Identifier Mechanism in Multi-Mode Call ProcessorCVE-2026-240847.5 High
- qualcomm ar8035 firmware, csra6620 firmware, csra6640 firmware +141 more +143 moreMissing Authentication for Critical Function in Data ModemCVE-2026-240798.1 High
- qualcomm 5g fixed wireless access platform firmware, ar8035 firmware, csra6620 firmware +145 more +147 moreExposure of Private Personal Information to an Unauthorized Actor in Data ModemCVE-2026-240786.5 Medium
- qualcomm 5g fixed wireless access platform firmware, apq8098 firmware, ar8031 firmware +271 more +273 moreImproper Validation of Syntactic Correctness of Input in DisplayCVE-2026-24091Fix available7.2 High
- qualcomm 5g fixed wireless access platform firmware, c-v2x 9150 firmware, cq7790 firmware +234 more +236 moreTime-of-check Time-of-use (TOCTOU) Race Condition in Camera DriverCVE-2025-596106.4 Medium
- qualcomm ar8035 firmware, csra6620 firmware, csra6640 firmware +138 more +140 moreOut-of-bounds Write in HLOSCVE-2025-596057.8 High
- qualcomm ar8035 firmware, cologne firmware, cq7790 firmware +263 more +265 moreNULL Pointer Dereference in SPS ApplicationsCVE-2025-596047.8 High
- qualcomm 5g fixed wireless access platform firmware, apq8098 firmware, ar8031 firmware +271 more +273 moreStack-based Buffer Overflow in DisplayCVE-2026-24085Fix available7.2 High
- qualcomm aqt1000 firmware, ar8035 firmware, csra6620 firmware +142 more +144 moreInteger Underflow (Wrap or Wraparound) in WLAN HostCVE-2026-24077Fix available6.5 Medium
- qualcomm 5g fixed wireless access platform firmware, ar8035 firmware, csra6620 firmware +152 more +154 moreInteger Overflow or Wraparound in GPSCVE-2025-473928.8 High
- qualcomm ar8035 firmware, cologne firmware, csra6620 firmware +179 more +181 moreBuffer Copy Without Checking Size of Input in Automotive PlatformCVE-2025-473897.8 High
- qualcomm ar8031 firmware, ar8035 firmware, csra6620 firmware +168 more +170 moreUse After Free in Automotive AudioCVE-2025-473867.8 High
- qualcomm 5g fixed wireless access platform firmware, fastconnect 6200 firmware, fastconnect 6700 firmware +41 more +43 moreReachable Assertion in FWCVE-2025-473846.5 Medium
- qualcomm 5g fixed wireless access platform firmware, 9206 lte modem firmware, 9207 lte modem firmware +204 more +206 moreMissing Cryptographic Step in Data ModemCVE-2025-473837.2 High
- qualcomm 5g fixed wireless access platform firmware, ar8031 firmware, ar8035 firmware +176 more +178 moreUse After Free in Automotive AudioCVE-2025-473797.8 High
- qualcomm ar8031 firmware, ar8035 firmware, csra6620 firmware +168 more +170 moreUse After Free in Automotive AudioCVE-2025-473767.8 High
- qualcomm ar8031 firmware, ar8035 firmware, csra6620 firmware +167 more +169 moreUse After Free in Automotive AudioCVE-2025-473757.8 High
- qualcomm 5g fixed wireless access platform firmware, apq8098 firmware, ar8031 firmware +236 more +238 moreInteger Overflow or Wraparound in GraphicsCVE-2026-21385In KEVPublic exploitFix available7.8 High
- qualcomm 205 mobile platform firmware, 315 5g iot modem firmware, 9205 lte modem firmware +327 more +329 moreBuffer Over-read in MProcCVE-2024-330568.4 High
- qualcomm 315 5g iot modem firmware, aqt1000 firmware, ar8035 firmware +209 more +211 moreImproper Validation of Array Index in HypervisorCVE-2024-330448.4 High
- qualcomm 315 5g iot modem firmware, aqt1000 firmware, ar8035 firmware +233 more +235 moreCryptographic Issues in BT ControllerCVE-2024-384088.2 High
- qualcomm 205 mobile platform firmware, 215 mobile platform firmware, 315 5g iot modem firmware +204 more +206 moreBuffer Copy Without Checking Size of Input in Graphics LinuxCVE-2024-38423Fix available7.8 High
- qualcomm 205 mobile platform firmware, 215 mobile platform firmware, 315 5g iot modem firmware +266 more +268 moreInteger Overflow to Buffer Overflow in AudioCVE-2024-38422Fix available7.8 High
- qualcomm 215 mobile platform firmware, ar8035 firmware, csra6620 firmware +176 more +178 moreUse After Free in Computer VisionCVE-2024-38415Fix available7.8 High
- qualcomm fastconnect 6700 firmware, fastconnect 6800 firmware, fastconnect 6900 firmware +74 more +76 moreUse After Free in DSP ServiceCVE-2024-43047In KEVFix available7.8 High
- qualcomm 205 mobile platform firmware, 215 mobile platform firmware, apq8017 firmware +201 more +203 moreBuffer Over-read in FM HostCVE-2024-33043Fix available5.5 Medium
- qualcomm 215 mobile platform firmware, apq8017 firmware, apq8037 firmware +240 more +242 moreNULL Pointer Dereference in HLOSCVE-2024-233576.2 Medium
- qualcomm ar8035 firmware, csra6620 firmware, csra6640 firmware +155 more +157 moreUse After Free in Graphics LinuxCVE-2024-33023Fix available8.4 High
- qualcomm 315 5g iot modem firmware, 860 mobile platform firmware, apq8064au firmware +323 more +325 moreBuffer Over-read in WLAN HostCVE-2024-33014Fix available7.5 High
- qualcomm 315 5g iot modem firmware, aqt1000 firmware, ar8031 firmware +307 more +309 moreBuffer Over-read in WLAN FirmwareCVE-2023-435367.5 High
- qualcomm 315 5g iot modem firmware, aqt1000 firmware, ar8035 firmware +236 more +238 moreBuffer Over-read in WLAN FirmwareCVE-2023-435337.5 High
- qualcomm aqt1000 firmware, ar8035 firmware, ar9380 firmware +284 more +286 moreNULL Pointer Dereference in WLAN FirmwareCVE-2023-435227.5 High
- qualcomm aqt1000 firmware, fastconnect 6200 firmware, fastconnect 6700 firmware +132 more +134 moreBuffer Copy without Checking Size of Input (`Classic Buffer Overflow`) in VideoCVE-2023-435197.3 High
- qualcomm aqt1000 firmware, fastconnect 6200 firmware, fastconnect 6700 firmware +151 more +153 moreUntrusted Pointer Dereference in VideoCVE-2023-435187.3 High
- qualcomm aqt1000 firmware, ar8035 firmware, fastconnect 6200 firmware +149 more +151 moreConfiguration Issue in CoreCVE-2023-330765.9 Medium
- qualcomm 315 5g iot modem firmware, 9205 lte modem firmware, aqt1000 firmware +243 more +245 moreBuffer copy without checking size of Input in CoreCVE-2023-330729.3 Critical
- qualcomm 315 5g iot modem firmware, ar8035 firmware, fastconnect 6200 firmware +99 more +101 moreImproper Input Validation in Multi-Mode Call ProcessorCVE-2023-330577.5 High
- qualcomm 315 5g iot modem firmware, ar8035 firmware, fastconnect 6200 firmware +99 more +101 moreImproper Release of Memory Before Removing Last Reference in Multi-Mode Call ProcessorCVE-2023-330497.5 High
- qualcomm 315 5g iot modem firmware, apq8017 firmware, aqt1000 firmware +265 more +267 moreUse of Out-of-range Pointer Offset in PCIeCVE-2023-43513Fix available7.8 High
- qualcomm 9206 lte modem firmware, aqt1000 firmware, ar8035 firmware +111 more +113 moreBuffer Copy Without Checking Size of Input in AudioCVE-2023-33069Fix available6.7 Medium
- qualcomm 9206 lte modem firmware, aqt1000 firmware, ar8035 firmware +111 more +113 moreBuffer Copy Without Checking Size of Input in AudioCVE-2023-33068Fix available6.7 Medium
- qualcomm 9206 lte modem firmware, aqt1000 firmware, ar8035 firmware +111 more +113 moreUse of Out-of-range Pointer Offset in AudioCVE-2023-33067Fix available6.7 Medium
- Show moreLoading…