Total
161 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2025-24857 | 2 Denx, Qualcomm | 8 U-boot, Ipq4019, Ipq5018 and 5 more | 2026-11-04 | N/A | 7.6 HIGH |
| Improper access control for volatile memory containing boot code in Universal Boot Loader (U-Boot) before 2017.11 and Qualcomm chips IPQ4019, IPQ5018, IPQ5322, IPQ6018, IPQ8064, IPQ8074, and IPQ9574 could allow an attacker to execute arbitrary code. | |||||
| CVE-2026-21367 | 1 Qualcomm | 300 Ar8035, Ar8035 Firmware, Cologne and 297 more | 2026-10-26 | N/A | 7.6 HIGH |
| Transient DOS when processing nonstandard FILS Discovery Frames with out-of-range action sizes during initial scans. | |||||
| CVE-2026-25268 | 1 Qualcomm | 256 5g Fixed Wireless Access Platform, 5g Fixed Wireless Access Platform Firmware, Ar8035 and 253 more | 2026-10-25 | N/A | 8.8 HIGH |
| Memory Corruption when processing invalid HT40 channel layouts during dynamic channel switching operations. | |||||
| CVE-2026-25289 | 1 Qualcomm | 402 Ar8035, Ar8035 Firmware, Cologne and 399 more | 2026-10-23 | N/A | 9.6 CRITICAL |
| Memory Corruption when processing Device Capability Extended attributes in certain NAN Service Discovery Frames with invalid length values. | |||||
| CVE-2025-27074 | 1 Qualcomm | 190 Apq8064au, Apq8064au Firmware, Csr8811 and 187 more | 2026-10-18 | N/A | 8.8 HIGH |
| Memory corruption while processing a GP command response. | |||||
| CVE-2025-27064 | 1 Qualcomm | 154 Fastconnect 6900, Fastconnect 6900 Firmware, Fastconnect 7800 and 151 more | 2026-10-18 | N/A | 6.1 MEDIUM |
| Information disclosure while registering commands from clients with diag through diagHal. | |||||
| CVE-2026-25302 | 1 Qualcomm | 584 Ar8035, Ar8035 Firmware, Cologne and 581 more | 2026-10-09 | N/A | 7.1 HIGH |
| Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted and processed. | |||||
| CVE-2025-27040 | 1 Qualcomm | 130 Csr8811, Csr8811 Firmware, Immersive Home 214 Platform and 127 more | 2026-10-08 | N/A | 6.5 MEDIUM |
| Information disclosure may occur while processing the hypervisor log. | |||||
| CVE-2025-47401 | 1 Qualcomm | 490 Ar8035, Ar8035 Firmware, Cologne and 487 more | 2026-10-07 | N/A | 6.5 MEDIUM |
| Transient DOS when processing target power rate tables during channel configuration. | |||||
| CVE-2025-47403 | 1 Qualcomm | 514 Ar8035, Ar8035 Firmware, Cologne and 511 more | 2026-10-07 | N/A | 6.5 MEDIUM |
| Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming. | |||||
| CVE-2025-47331 | 1 Qualcomm | 598 Ar8031, Ar8031 Firmware, Ar8035 and 595 more | 2026-10-07 | N/A | 6.1 MEDIUM |
| Information disclosure while processing a firmware event. | |||||
| CVE-2025-21482 | 1 Qualcomm | 574 315 5g Iot Modem, 315 5g Iot Modem Firmware, 9205 Lte Modem and 571 more | 2026-09-26 | N/A | 7.1 HIGH |
| Cryptographic issue while performing RSA PKCS padding decoding. | |||||
| CVE-2026-25275 | 1 Qualcomm | 752 5g Fixed Wireless Access Platform, 5g Fixed Wireless Access Platform Firmware, Aqt1000 and 749 more | 2026-09-22 | N/A | 7.5 HIGH |
| Transient DOS when processing authentication frames with invalid FILS information element header lengths. | |||||
| CVE-2025-59609 | 1 Qualcomm | 374 5g Fixed Wireless Access Platform, 5g Fixed Wireless Access Platform Firmware, Ar8035 and 371 more | 2026-07-22 | N/A | 5.5 MEDIUM |
| Information Disclosure when processing advertisement frames with malformed MBSSID elements of insufficient length. | |||||
| CVE-2025-47328 | 1 Qualcomm | 134 Fastconnect 7800, Fastconnect 7800 Firmware, Immersive Home 3210 Platform and 131 more | 2026-06-17 | N/A | 7.5 HIGH |
| Transient DOS while processing power control requests with invalid antenna or stream values. | |||||
| CVE-2025-47326 | 1 Qualcomm | 240 Ar8035, Ar8035 Firmware, Csr8811 and 237 more | 2026-06-17 | N/A | 7.5 HIGH |
| Transient DOS while handling command data during power control processing. | |||||
| CVE-2025-27073 | 1 Qualcomm | 340 Ar8035, Ar8035 Firmware, Csr8811 and 337 more | 2026-06-17 | N/A | 7.5 HIGH |
| Transient DOS while creating NDP instance. | |||||
| CVE-2025-27066 | 1 Qualcomm | 744 315 5g Iot Modem, 315 5g Iot Modem Firmware, Aqt1000 and 741 more | 2026-06-17 | N/A | 7.5 HIGH |
| Transient DOS while processing an ANQP message. | |||||
| CVE-2025-27065 | 1 Qualcomm | 300 Ar8035, Ar8035 Firmware, Fastconnect 6800 and 297 more | 2026-06-17 | N/A | 7.5 HIGH |
| Transient DOS while processing a frame with malformed shared-key descriptor. | |||||
| CVE-2025-27061 | 1 Qualcomm | 688 315 5g Iot, 315 5g Iot Firmware, Aqt1000 and 685 more | 2026-06-17 | N/A | 7.8 HIGH |
| Memory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the video firmware. | |||||