Total
28 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-21379 | 1 Qualcomm | 94 Aqt1000, Aqt1000 Firmware, Cologne and 91 more | 2026-10-25 | N/A | 7.8 HIGH |
| Memory Corruption when allocating memory with sizes that exceed the maximum allowed value. | |||||
| CVE-2026-25271 | 1 Qualcomm | 42 Cologne, Cologne Firmware, Fastconnect 6900 and 39 more | 2026-10-25 | N/A | 7.8 HIGH |
| Memory Corruption when processing asynchronous input parameters due to improper handling of modified values between check and use. | |||||
| CVE-2026-25289 | 1 Qualcomm | 402 Ar8035, Ar8035 Firmware, Cologne and 399 more | 2026-10-23 | N/A | 9.6 CRITICAL |
| Memory Corruption when processing Device Capability Extended attributes in certain NAN Service Discovery Frames with invalid length values. | |||||
| CVE-2026-57559 | 1 Qualcomm | 44 Cologne, Cologne Firmware, Fastconnect 6700 and 41 more | 2026-10-09 | N/A | 7.8 HIGH |
| Memory corruption while processing service requests. | |||||
| CVE-2026-57555 | 1 Qualcomm | 44 Cologne, Cologne Firmware, Fastconnect 6700 and 41 more | 2026-10-09 | N/A | 7.8 HIGH |
| Memory Corruption when executing system service routines due to improper handling of user input buffers. | |||||
| CVE-2026-25302 | 1 Qualcomm | 584 Ar8035, Ar8035 Firmware, Cologne and 581 more | 2026-10-09 | N/A | 7.1 HIGH |
| Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted and processed. | |||||
| CVE-2026-25274 | 1 Qualcomm | 90 Aqt1000, Aqt1000 Firmware, Cologne and 87 more | 2026-10-09 | N/A | 6.7 MEDIUM |
| Memory Corruption when processing concurrent DMA buffer allocation and deallocation commands without proper synchronization. | |||||
| CVE-2026-25267 | 1 Qualcomm | 332 5g Fixed Wireless Access Platform, 5g Fixed Wireless Access Platform Firmware, 9205 Lte Modem and 329 more | 2026-10-09 | N/A | 7.8 HIGH |
| Memory corruption when non-secure loader rewrites page tables before secure memory initialization. | |||||
| CVE-2026-25263 | 1 Qualcomm | 332 5g Fixed Wireless Access Platform, 5g Fixed Wireless Access Platform Firmware, 9205 Lte Modem and 329 more | 2026-10-09 | N/A | 6.6 MEDIUM |
| Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters. | |||||
| CVE-2025-47406 | 1 Qualcomm | 62 Cologne, Cologne Firmware, Fastconnect 6700 and 59 more | 2026-10-07 | N/A | 6.1 MEDIUM |
| Information Disclosure while processing IOCTL handler callbacks without verifying buffer size. | |||||
| CVE-2025-47401 | 1 Qualcomm | 490 Ar8035, Ar8035 Firmware, Cologne and 487 more | 2026-10-07 | N/A | 6.5 MEDIUM |
| Transient DOS when processing target power rate tables during channel configuration. | |||||
| CVE-2025-47403 | 1 Qualcomm | 514 Ar8035, Ar8035 Firmware, Cologne and 511 more | 2026-10-07 | N/A | 6.5 MEDIUM |
| Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming. | |||||
| CVE-2025-47408 | 1 Qualcomm | 40 Fastconnect 6200, Fastconnect 6200 Firmware, Fastconnect 6900 and 37 more | 2026-10-07 | N/A | 7.8 HIGH |
| Memory corruption when another driver calls an IOCTL with invalid input/output buffer. | |||||
| CVE-2025-47405 | 1 Qualcomm | 32 Fastconnect 6900, Fastconnect 6900 Firmware, Fastconnect 7800 and 29 more | 2026-10-07 | N/A | 7.8 HIGH |
| Memory corruption when processing camera sensor input/output control codes with invalid output buffers. | |||||
| CVE-2026-25275 | 1 Qualcomm | 752 5g Fixed Wireless Access Platform, 5g Fixed Wireless Access Platform Firmware, Aqt1000 and 749 more | 2026-09-22 | N/A | 7.5 HIGH |
| Transient DOS when processing authentication frames with invalid FILS information element header lengths. | |||||
| CVE-2026-24075 | 1 Qualcomm | 86 Aqt1000, Aqt1000 Firmware, Cologne and 83 more | 2026-09-22 | N/A | 7.8 HIGH |
| Memory Corruption when multiple threads issue concurrent IOCTL requests to the device control handler due to improper synchronization and race conditions. | |||||
| CVE-2026-24073 | 1 Qualcomm | 28 Cologne, Cologne Firmware, Fastconnect 6900 and 25 more | 2026-09-22 | N/A | 7.8 HIGH |
| Memory corruption when processing decode statistics due to insufficient validation of offset against structure size. | |||||
| CVE-2026-24074 | 1 Qualcomm | 50 Cologne, Cologne Firmware, Fastconnect 6200 and 47 more | 2026-09-22 | N/A | 7.8 HIGH |
| Memory Corruption when processing data with large offset and length values exceeds buffer limits during data copy operations. | |||||
| CVE-2026-24081 | 1 Qualcomm | 304 Ar8035, Ar8035 Firmware, C110100 and 301 more | 2026-09-22 | N/A | 7.4 HIGH |
| Transient DOS when processing a channel map with insufficient used channels and adaptive frequency hopping is fully enabled. | |||||
| CVE-2026-25261 | 1 Qualcomm | 48 Cologne, Cologne Firmware, Fastconnect 6700 and 45 more | 2026-09-22 | N/A | 6.7 MEDIUM |
| Memory corruption while processing rear sensor IOCTL calls. | |||||