Skip to contentQualcomm Snapdragon Auto 5g Modem-rf Gen 2 Firmware vulnerabilities
- qualcomm ar8031 firmware, ar8035 firmware, csra6620 firmware +216 more +218 moreUse After Free in DSP ServiceCVE-2026-57554Fix available7.8 High
- qualcomm ar8035 firmware, cologne firmware, cq2390m firmware +290 more +292 moreImproper Verification of Cryptographic Signature in BootCVE-2026-253027.1 High
- qualcomm 5g fixed wireless access platform firmware, aqt1000 firmware, ar8031 firmware +374 more +376 moreBuffer Over-read in WLAN FirmwareCVE-2026-252757.5 High
- qualcomm ar8031 firmware, ar8035 firmware, cq7790 firmware +209 more +211 moreImproper Validation of Syntactic Correctness of Input in Automotive Linux OSCVE-2026-252927.6 High
- qualcomm ar8035 firmware, cologne firmware, cq7790 firmware +199 more +201 moreStack-based Buffer Overflow in WLAN FirmwareCVE-2026-252899.6 Critical
- qualcomm 5g fixed wireless access platform firmware, aqt1000 firmware, ar8035 firmware +126 more +128 moreInsecure Security Identifier Mechanism in Multi-Mode Call ProcessorCVE-2026-240847.5 High
- qualcomm ar8035 firmware, csra6620 firmware, csra6640 firmware +141 more +143 moreMissing Authentication for Critical Function in Data ModemCVE-2026-240798.1 High
- qualcomm 5g fixed wireless access platform firmware, ar8035 firmware, csra6620 firmware +145 more +147 moreExposure of Private Personal Information to an Unauthorized Actor in Data ModemCVE-2026-240786.5 Medium
- qualcomm ar8031 firmware, ar8035 firmware, cologne firmware +216 more +218 moreImproper Validation of Syntactic Correctness of Input in DisplayCVE-2026-24092Fix available7.2 High
- qualcomm 5g fixed wireless access platform firmware, apq8098 firmware, ar8031 firmware +271 more +273 moreImproper Validation of Syntactic Correctness of Input in DisplayCVE-2026-24091Fix available7.2 High
- qualcomm ar8031 firmware, ar8035 firmware, cologne firmware +215 more +217 moreMissing Authentication for Critical Function in HLOSCVE-2026-24090Public exploitFix available7.1 High
- qualcomm ar8031 firmware, ar8035 firmware, cologne firmware +213 more +215 moreImproper Validation of Syntactic Correctness of Input in KernelCVE-2026-24087Fix available7.2 High
- qualcomm ar8035 firmware, cologne firmware, cq7790 firmware +263 more +265 moreNULL Pointer Dereference in SPS ApplicationsCVE-2025-596047.8 High
- qualcomm ar8031 firmware, ar8035 firmware, cologne firmware +217 more +219 moreImproper Validation of Syntactic Correctness of Input in KernelCVE-2026-24089Fix available7.2 High
- qualcomm 5g fixed wireless access platform firmware, apq8098 firmware, ar8031 firmware +271 more +273 moreStack-based Buffer Overflow in DisplayCVE-2026-24085Fix available7.2 High
- qualcomm ar8031 firmware, ar8035 firmware, csra6620 firmware +174 more +176 moreUse After Free in Automotive GPUCVE-2026-240827.8 High
- qualcomm 215 mobile firmware, 5g fixed wireless access firmware, ar8031 firmware +186 more +188 moreBuffer Copy Without Checking Size of Input in Automotive AudioCVE-2025-474046.5 Medium
- qualcomm ar8035 firmware, cologne firmware, cq7790 firmware +255 more +257 moreBuffer Over-read in WLAN FirmwareCVE-2025-474036.5 Medium
- qualcomm ar8035 firmware, cologne firmware, cq7790 firmware +243 more +245 moreBuffer Over-read in WLAN HALCVE-2025-474016.5 Medium
- qualcomm 5g fixed wireless access platform firmware, ar8035 firmware, csra6620 firmware +152 more +154 moreInteger Overflow or Wraparound in GPSCVE-2025-473928.8 High
- qualcomm ar8035 firmware, cologne firmware, csra6620 firmware +179 more +181 moreBuffer Copy Without Checking Size of Input in Automotive PlatformCVE-2025-473897.8 High
- qualcomm ar8031 firmware, ar8035 firmware, csra6620 firmware +168 more +170 moreUse After Free in Automotive AudioCVE-2025-473867.8 High
- qualcomm 5g fixed wireless access platform firmware, 9206 lte modem firmware, 9207 lte modem firmware +204 more +206 moreMissing Cryptographic Step in Data ModemCVE-2025-473837.2 High
- qualcomm 5g fixed wireless access platform firmware, ar8031 firmware, ar8035 firmware +176 more +178 moreUse After Free in Automotive AudioCVE-2025-473797.8 High
- qualcomm ar8035 firmware, fastconnect 6200 firmware, fastconnect 6900 firmware +120 more +122 moreUse After Free in Automotive AudioCVE-2025-473777.8 High
- qualcomm ar8031 firmware, ar8035 firmware, csra6620 firmware +168 more +170 moreUse After Free in Automotive AudioCVE-2025-473767.8 High
- qualcomm ar8031 firmware, ar8035 firmware, csra6620 firmware +167 more +169 moreUse After Free in Automotive AudioCVE-2025-473757.8 High
- qualcomm ar8035 firmware, cologne firmware, fastconnect 6200 firmware +186 more +188 moreOut-of-bounds Write in AutomotiveCVE-2025-473737.8 High
- qualcomm 5g fixed wireless access platform firmware, ar8035 firmware, csra6620 firmware +123 more +125 moreReachable Assertion in ModemCVE-2025-473716.5 Medium
- qualcomm ar8035 firmware, cologne firmware, fastconnect 6900 firmware +92 more +94 moreBuffer Over-read in WLAN FirmwareCVE-2025-474026.5 Medium
- qualcomm ar8035 firmware, fastconnect 6200 firmware, fastconnect 6700 firmware +157 more +159 moreExposed Dangerous Method or Function in HLOSCVE-2025-473667.1 High
- qualcomm aqt1000 firmware, ar8035 firmware, csra6620 firmware +202 more +204 moreUse of Uninitialized Variable in HLOSCVE-2025-473487.8 High
- qualcomm ar8035 firmware, fastconnect 6200 firmware, fastconnect 6700 firmware +111 more +113 moreOut-of-bounds Write in HLOSCVE-2025-473467.8 High
- qualcomm ar8035 firmware, fastconnect 6200 firmware, fastconnect 6700 firmware +103 more +105 moreReusing a Nonce, Key Pair in Encryption in Automotive PlatformCVE-2025-473458.4 High
- qualcomm ar8035 firmware, ar9380 firmware, csr8811 firmware +183 more +185 moreUse After Free in HLOSCVE-2025-473397.8 High
- qualcomm aqt1000 firmware, ar8031 firmware, ar8035 firmware +237 more +239 moreUse After Free in HLOSCVE-2025-473336.6 Medium
- qualcomm ar8031 firmware, ar8035 firmware, csr8811 firmware +297 more +299 moreBuffer Over-read in VideoCVE-2025-473316.1 Medium
- qualcomm ar8031 firmware, ar8035 firmware, c-v2x 9150 firmware +221 more +223 moreBuffer Over-read in VideoCVE-2025-473305.5 Medium
- qualcomm ar8035 firmware, csra6620 firmware, csra6640 firmware +176 more +178 moreInteger Overflow or Wraparound in AudioCVE-2025-473237.8 High
- qualcomm ar8031 firmware, ar8035 firmware, csra6620 firmware +109 more +111 moreUse After Free in Automotive Linux OSCVE-2025-473227.8 High
- qualcomm 9206 lte modem firmware, apq8017 firmware, aqt1000 firmware +211 more +213 moreOut-of-bounds Write in AudioCVE-2025-473207.8 High
- qualcomm ar8035 firmware, fastconnect 6200 firmware, fastconnect 6700 firmware +116 more +118 moreExposure of Sensitive System Information to an Unauthorized Control Sphere in HLOSCVE-2025-473196.7 Medium
- qualcomm ar8035 firmware, csrb31024 firmware, fastconnect 6700 firmware +134 more +136 moreReachable Assertion in BT ControllerCVE-2025-473706.5 Medium
- qualcomm ar8035 firmware, fastconnect 6200 firmware, fastconnect 6700 firmware +173 more +175 moreOut-of-bounds Write in Windows ComputeCVE-2025-270707.8 High
- qualcomm fastconnect 6900 firmware, fastconnect 7800 firmware, immersive home 3210 platform firmware +75 more +77 moreBuffer Over-read in Core ServicesCVE-2025-270646.1 Medium
- qualcomm 315 5g iot modem firmware, 9205 lte modem firmware, aqt1000 firmware +297 more +299 moreOut-of-bounds Write in DisplayCVE-2025-270547.8 High
- qualcomm 215 mobile platform firmware, 315 5g iot modem firmware, 9205 lte modem firmware +317 more +319 moreIncorrect Calculation of Buffer Size in HLOSCVE-2025-270537.8 High
- qualcomm ar8035 firmware, fastconnect 6900 firmware, fastconnect 7800 firmware +61 more +63 moreBuffer Over-read in VideoCVE-2025-270415.5 Medium
- qualcomm apq8017 firmware, apq8064au firmware, aqt1000 firmware +201 more +203 moreBuffer Over-read in BT ControllerCVE-2025-473187.5 High
- qualcomm 315 5g iot modem firmware, ar8035 firmware, fastconnect 6200 firmware +111 more +113 moreImproper Validation of Array Index in Multi-Mode Call ProcessorCVE-2025-270349.8 Critical
- Show moreLoading…