This page lists publicly disclosed CVE vulnerabilities affecting qualcomm ar6003_firmware (linked via NVD CPE). Each row includes severity scores, summaries, and publication dates to help identify and analyze security issues.
| CVE | Summary | Source | Max CVSS | EPSS % | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2018-11816 | Crafted Binder Request Causes Heap UAF in MediaServer | [email protected] | 7.8 | 0.06% | 2024-11-26 | 2026-06-16 |
| CVE-2017-18153 | A race condition exists in a driver potentially leading to a use-after-free condition. | [email protected] | 8.4 | 0.05% | 2024-11-26 | 2026-06-16 |
| CVE-2023-43551 | Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command. | [email protected] | 9.1 | 0.26% | 2024-06-03 | 2026-06-17 |
| CVE-2023-33066 | Memory corruption in Audio while processing RT proxy port register driver. | [email protected] | 8.4 | 0.07% | 2024-03-04 | 2026-06-17 |
| CVE-2023-33018 | Memory corruption while using the UIM diag command to get the operators name. | [email protected] | 7.8 | 0.06% | 2023-12-04 | 2026-06-17 |
| CVE-2023-24849 | Information Disclosure in data Modem while parsing an FMTP line in an SDP message. | [email protected] | 8.2 | 0.30% | 2023-10-03 | 2026-06-17 |
| CVE-2023-24848 | Information Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line value. | [email protected] | 8.2 | 0.30% | 2023-10-03 | 2026-06-17 |
| CVE-2022-40521 | Transient DOS due to improper authorization in Modem | [email protected] | 7.5 | 0.35% | 2023-06-06 | 2026-06-17 |
| CVE-2022-33264 | Memory corruption in modem due to stack based buffer overflow while parsing OTASP Key Generation Request Message. | [email protected] | 7.9 | 0.09% | 2023-06-06 | 2026-06-17 |
| CVE-2022-33302 | Memory corruption due to improper validation of array index in User Identity Module when APN TLV length is greater than command length. | [email protected] | 6.8 | 0.12% | 2023-04-13 | 2026-06-17 |
| CVE-2022-33289 | Memory corruption occurs in Modem due to improper validation of array index when malformed APDU is sent from card. | [email protected] | 6.8 | 0.19% | 2023-04-13 | 2026-06-17 |
| CVE-2022-33213 | Memory corruption in modem due to buffer overflow while processing a PPP packet | [email protected] | 7.5 | 0.41% | 2023-03-10 | 2026-06-17 |
| CVE-2022-25694 | Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM | [email protected] | 8.4 | 0.05% | 2023-03-10 | 2026-06-17 |
| CVE-2022-25682 | Memory corruption in MODEM UIM due to usage of out of range pointer offset while decoding command from card in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables | [email protected] | 8.4 | 0.12% | 2022-12-13 | 2026-06-17 |
| CVE-2022-25720 | Memory corruption in WLAN due to out of bound array access during connect/roaming in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables | [email protected] | 9.8 | 0.40% | 2022-10-19 | 2026-06-17 |
| CVE-2021-30344 | Improper authorization of a replayed LTE security mode command can lead to a denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables | [email protected] | 7.5 | 0.56% | 2022-06-14 | 2026-06-16 |
| CVE-2021-35115 | Improper handling of multiple session supported by PVM backend can lead to use after free in Snapdragon Auto, Snapdragon Mobile | [email protected] | 8.4 | 0.17% | 2022-04-01 | 2026-06-16 |
| CVE-2021-30293 | Possible assertion due to lack of input validation in PUSCH configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT | [email protected] | 7.5 | 0.57% | 2022-01-03 | 2026-06-16 |
| CVE-2021-30273 | Possible assertion due to improper handling of IPV6 packet with invalid length in destination options header in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables | [email protected] | 7.5 | 0.57% | 2022-01-03 | 2026-06-16 |
| CVE-2021-30270 | Possible null pointer dereference in thread profile trap handler due to lack of thread ID validation before dereferencing it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking | [email protected] | 7.3 | 0.15% | 2022-01-03 | 2026-06-16 |