CVE-2024-49846: Qualcomm AR8035 Firmware

Critical severity, CVSS 9.1. EPSS: 0.3% chance of exploitation in the next 30 days.

Memory corruption while decoding of OTA messages from T3448 IE.

Affected products

• Qualcomm AR8035 Firmware: affected versions not specified
• Qualcomm Fastconnect 7800 Firmware: affected versions not specified
• Qualcomm QCA6574AU Firmware: affected versions not specified
• Qualcomm QCA6595AU Firmware: affected versions not specified
• Qualcomm QCA6678AQ Firmware: affected versions not specified
• Qualcomm QCA6688AQ Firmware: affected versions not specified
• Qualcomm QCA6698AQ Firmware: affected versions not specified
• Qualcomm QCA8081 Firmware: affected versions not specified
• Qualcomm QCA8337 Firmware: affected versions not specified
• Qualcomm QCC710 Firmware: affected versions not specified
• Qualcomm QCN6224 Firmware: affected versions not specified
• Qualcomm QCN6274 Firmware: affected versions not specified
• Qualcomm QFW7114 Firmware: affected versions not specified
• Qualcomm QFW7124 Firmware: affected versions not specified
• Qualcomm SDX80M Firmware: affected versions not specified
• Qualcomm SM8750 Firmware: affected versions not specified
• Qualcomm SM8750P Firmware: affected versions not specified
• Qualcomm Snapdragon Auto 5g Modem-Rf Gen 2 Firmware: affected versions not specified
• Qualcomm Snapdragon w5+ Gen 1 Wearable Firmware: affected versions not specified
• Qualcomm Snapdragon x72 5g Modem-Rf System Firmware: affected versions not specified
• Qualcomm Snapdragon x75 5g Modem-Rf System Firmware: affected versions not specified
• Qualcomm SW5100 Firmware: affected versions not specified
• Qualcomm SW5100P Firmware: affected versions not specified
• Qualcomm WCD9340 Firmware: affected versions not specified
• Qualcomm WCD9395 Firmware: affected versions not specified
• and 6 more

Published 2025-05-06. Last modified 2026-06-17.