Total
632 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2025-59615 | 1 Qualcomm | 120 Fastconnect 6700, Fastconnect 6700 Firmware, Fastconnect 6900 and 117 more | 2026-09-29 | N/A | 6.6 MEDIUM |
| Memory Corruption when invoking device input/output control operations for mapping and unmapping persistent memory buffers due to improper synchronization. | |||||
| CVE-2025-59616 | 1 Qualcomm | 96 Fastconnect 6700, Fastconnect 6700 Firmware, Fastconnect 6900 and 93 more | 2026-09-29 | N/A | 6.6 MEDIUM |
| Memory Corruption when processing multiple IOCTL calls with the same buffer file descriptor input due to accessing already freed memory. | |||||
| CVE-2025-21484 | 1 Qualcomm | 346 Apq8064au, Apq8064au Firmware, Aqt1000 and 343 more | 2026-09-26 | N/A | 8.2 HIGH |
| Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet. | |||||
| CVE-2025-21482 | 1 Qualcomm | 574 315 5g Iot Modem, 315 5g Iot Modem Firmware, 9205 Lte Modem and 571 more | 2026-09-26 | N/A | 7.1 HIGH |
| Cryptographic issue while performing RSA PKCS padding decoding. | |||||
| CVE-2025-21487 | 1 Qualcomm | 454 205 Mobile Platform, 205 Mobile Platform Firmware, 215 Mobile Platform and 451 more | 2026-09-26 | N/A | 8.2 HIGH |
| Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length. | |||||
| CVE-2025-21488 | 1 Qualcomm | 216 Fastconnect 6200, Fastconnect 6200 Firmware, Fastconnect 6700 and 213 more | 2026-09-26 | N/A | 8.2 HIGH |
| Information disclosure while decoding this RTP packet headers received by UE from the network when the padding bit is set. | |||||
| CVE-2025-27036 | 1 Qualcomm | 42 Fastconnect 6700, Fastconnect 6700 Firmware, Fastconnect 6900 and 39 more | 2026-09-26 | N/A | 6.1 MEDIUM |
| Information disclosure when Video engine escape input data is less than expected minimum size. | |||||
| CVE-2026-25275 | 1 Qualcomm | 752 5g Fixed Wireless Access Platform, 5g Fixed Wireless Access Platform Firmware, Aqt1000 and 749 more | 2026-09-22 | N/A | 7.5 HIGH |
| Transient DOS when processing authentication frames with invalid FILS information element header lengths. | |||||
| CVE-2026-24075 | 1 Qualcomm | 86 Aqt1000, Aqt1000 Firmware, Cologne and 83 more | 2026-09-22 | N/A | 7.8 HIGH |
| Memory Corruption when multiple threads issue concurrent IOCTL requests to the device control handler due to improper synchronization and race conditions. | |||||
| CVE-2026-24073 | 1 Qualcomm | 28 Cologne, Cologne Firmware, Fastconnect 6900 and 25 more | 2026-09-22 | N/A | 7.8 HIGH |
| Memory corruption when processing decode statistics due to insufficient validation of offset against structure size. | |||||
| CVE-2026-24074 | 1 Qualcomm | 50 Cologne, Cologne Firmware, Fastconnect 6200 and 47 more | 2026-09-22 | N/A | 7.8 HIGH |
| Memory Corruption when processing data with large offset and length values exceeds buffer limits during data copy operations. | |||||
| CVE-2026-24081 | 1 Qualcomm | 304 Ar8035, Ar8035 Firmware, C110100 and 301 more | 2026-09-22 | N/A | 7.4 HIGH |
| Transient DOS when processing a channel map with insufficient used channels and adaptive frequency hopping is fully enabled. | |||||
| CVE-2026-25261 | 1 Qualcomm | 48 Cologne, Cologne Firmware, Fastconnect 6700 and 45 more | 2026-09-22 | N/A | 6.7 MEDIUM |
| Memory corruption while processing rear sensor IOCTL calls. | |||||
| CVE-2026-25294 | 1 Qualcomm | 150 Cologne, Cologne Firmware, Congo and 147 more | 2026-09-22 | N/A | 7.4 HIGH |
| Transient DOS while parsing frame during channel usage. | |||||
| CVE-2026-25290 | 1 Qualcomm | 14 Cologne, Cologne Firmware, Fastconnect 7800 and 11 more | 2026-09-22 | N/A | 7.8 HIGH |
| Memory Corruption when validating large data buffers from external sources using addition to check buffer length. | |||||
| CVE-2026-25284 | 1 Qualcomm | 14 Cologne, Cologne Firmware, Fastconnect 7800 and 11 more | 2026-09-22 | N/A | 7.3 HIGH |
| Information Disclosure when a pointer is reused after being deallocated. | |||||
| CVE-2026-25283 | 1 Qualcomm | 14 Cologne, Cologne Firmware, Fastconnect 7800 and 11 more | 2026-09-22 | N/A | 8.8 HIGH |
| Memory Corruption when copying unverified data from an external source exceeds the allocated buffer size. | |||||
| CVE-2026-25282 | 1 Qualcomm | 14 Cologne, Cologne Firmware, Fastconnect 7800 and 11 more | 2026-09-22 | N/A | 7.9 HIGH |
| Transient DOS when processing unverified data from a neighboring system causes out of bound memory access. | |||||
| CVE-2026-25281 | 1 Qualcomm | 14 Cologne, Cologne Firmware, Fastconnect 7800 and 11 more | 2026-09-22 | N/A | 7.4 HIGH |
| Transient DOS when processing large or numerous request buffers without sufficient memory allocation validation. | |||||
| CVE-2026-25280 | 1 Qualcomm | 40 Cologne, Cologne Firmware, Fastconnect 6700 and 37 more | 2026-09-22 | N/A | 7.8 HIGH |
| Memory corruption when processing escape handling flow with insufficient user buffer sizes. | |||||