Total
229 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2025-59609 | 1 Qualcomm | 374 5g Fixed Wireless Access Platform, 5g Fixed Wireless Access Platform Firmware, Ar8035 and 371 more | 2026-07-22 | N/A | 5.5 MEDIUM |
| Information Disclosure when processing advertisement frames with malformed MBSSID elements of insufficient length. | |||||
| CVE-2026-25268 | 1 Qualcomm | 256 5g Fixed Wireless Access Platform, 5g Fixed Wireless Access Platform Firmware, Ar8035 and 253 more | 2026-07-07 | N/A | 8.8 HIGH |
| Memory Corruption when processing invalid HT40 channel layouts during dynamic channel switching operations. | |||||
| CVE-2026-21367 | 1 Qualcomm | 300 Ar8035, Ar8035 Firmware, Cologne and 297 more | 2026-06-17 | N/A | 7.6 HIGH |
| Transient DOS when processing nonstandard FILS Discovery Frames with out-of-range action sizes during initial scans. | |||||
| CVE-2025-47403 | 1 Qualcomm | 514 Ar8035, Ar8035 Firmware, Cologne and 511 more | 2026-06-17 | N/A | 6.5 MEDIUM |
| Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming. | |||||
| CVE-2025-47339 | 1 Qualcomm | 370 Ar8035, Ar8035 Firmware, Ar9380 and 367 more | 2026-06-17 | N/A | 7.8 HIGH |
| Memory corruption while deinitializing a HDCP session. | |||||
| CVE-2025-47331 | 1 Qualcomm | 598 Ar8031, Ar8031 Firmware, Ar8035 and 595 more | 2026-06-17 | N/A | 6.1 MEDIUM |
| Information disclosure while processing a firmware event. | |||||
| CVE-2025-47326 | 1 Qualcomm | 240 Ar8035, Ar8035 Firmware, Csr8811 and 237 more | 2026-06-17 | N/A | 7.5 HIGH |
| Transient DOS while handling command data during power control processing. | |||||
| CVE-2025-27073 | 1 Qualcomm | 340 Ar8035, Ar8035 Firmware, Csr8811 and 337 more | 2026-06-17 | N/A | 7.5 HIGH |
| Transient DOS while creating NDP instance. | |||||
| CVE-2025-27066 | 1 Qualcomm | 744 315 5g Iot Modem, 315 5g Iot Modem Firmware, Aqt1000 and 741 more | 2026-06-17 | N/A | 7.5 HIGH |
| Transient DOS while processing an ANQP message. | |||||
| CVE-2025-27057 | 1 Qualcomm | 422 Ar8035, Ar8035 Firmware, Csr8811 and 419 more | 2026-06-17 | N/A | 7.5 HIGH |
| Transient DOS while handling beacon frames with invalid IE header length. | |||||
| CVE-2025-21482 | 1 Qualcomm | 574 315 5g Iot Modem, 315 5g Iot Modem Firmware, 9205 Lte Modem and 571 more | 2026-06-17 | N/A | 7.1 HIGH |
| Cryptographic issue while performing RSA PKCS padding decoding. | |||||
| CVE-2025-21465 | 1 Qualcomm | 698 315 5g Iot Modem, 315 5g Iot Modem Firmware, 9205 Lte Modem and 695 more | 2026-06-17 | N/A | 6.5 MEDIUM |
| Information disclosure while processing the hash segment in an MBN file. | |||||
| CVE-2025-21464 | 1 Qualcomm | 684 315 5g Iot Modem, 315 5g Iot Modem Firmware, 9205 Lte Modem and 681 more | 2026-06-17 | N/A | 6.5 MEDIUM |
| Information disclosure while reading data from an image using specified offset and size parameters. | |||||
| CVE-2025-21463 | 1 Qualcomm | 422 Ar8035, Ar8035 Firmware, Csr8811 and 419 more | 2026-06-17 | N/A | 7.5 HIGH |
| Transient DOS while processing the EHT operation IE in the received beacon frame. | |||||
| CVE-2025-21446 | 1 Qualcomm | 480 Ar8035, Ar8035 Firmware, Ar9380 and 477 more | 2026-06-17 | N/A | 7.5 HIGH |
| Transient DOS may occur when processing vendor-specific information elements while parsing a WLAN frame for BTM requests. | |||||
| CVE-2025-21435 | 1 Qualcomm | 298 Ar8035, Ar8035 Firmware, Csr8811 and 295 more | 2026-06-17 | N/A | 7.5 HIGH |
| Transient DOS may occur while parsing extended IE in beacon. | |||||
| CVE-2024-49839 | 1 Qualcomm | 372 Ar8035, Ar8035 Firmware, Csr8811 and 369 more | 2026-06-17 | N/A | 8.2 HIGH |
| Memory corruption during management frame processing due to mismatch in T2LM info element. | |||||
| CVE-2024-45571 | 1 Qualcomm | 300 Ar8035, Ar8035 Firmware, Csr8811 and 297 more | 2026-06-17 | N/A | 7.8 HIGH |
| Memory corruption may occour occur when stopping the WLAN interface after processing a WMI command from the interface. | |||||
| CVE-2024-45569 | 1 Qualcomm | 348 Ar8035, Ar8035 Firmware, Csr8811 and 345 more | 2026-06-17 | N/A | 9.8 CRITICAL |
| Memory corruption while parsing the ML IE due to invalid frame content. | |||||
| CVE-2024-45558 | 1 Qualcomm | 366 Ar8035, Ar8035 Firmware, Csr8811 and 363 more | 2026-06-17 | N/A | 7.5 HIGH |
| Transient DOS can occur when the driver parses the per STA profile IE and tries to access the EXTN element ID without checking the IE length. | |||||