QF
Product
Qcm2290 Firmware
by Qualcomm · last CVE Oct 6, 2026
On CISA KEVExploited in the wild
231
CVEs
3
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 26High 166Medium 39Low 0
Watch

Add Qcm2290 Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-33107
In wildKEV
7.8
1%
Dec 5
Integer Overflow or Wraparound in Graphics Linux
Affected: 0
CVE-2023-33106
In wildKEV
7.8
1%
Dec 5
Use of Out-of-range Pointer Offset in Graphics
Affected: 0
CVE-2022-22071
In wildKEV
7.8
0%
Jun 14
Qualcomm Multiple Chipsets Use-After-Free Vulnerability
Affected: All versions, or not specified
CVE-2025-21483
9.8
0%
Sep 24
Memory corruption when the UE receives an RTP packet from the network, during the reassembly of NALUs
Affected: All versions, or not specified
CVE-2023-43548
9.8
0%
Mar 4
Memory corruption while parsing qcp clip with invalid chunk data size
Affected: All versions, or not specified
CVE-2023-43519
9.8
0%
Feb 6
Memory corruption in video while parsing the Videoinfo, when the size of atom is greater than the videoinfo size
Affected: All versions, or not specified
CVE-2023-43518
9.8
0%
Feb 6
Memory corruption in video while parsing invalid mp2 clip
Affected: All versions, or not specified
CVE-2023-22388
9.8
0%
Nov 7
Memory Corruption in Multi-mode Call Processor while processing bit mask API
Affected: All versions, or not specified
CVE-2023-22385
9.8
0%
Oct 3
Memory Corruption in Data Modem while making a MO call or MT VOLTE call
Affected: All versions, or not specified
CVE-2023-21631
9.8
0%
Jul 4
Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network
Affected: All versions, or not specified
CVE-2022-40537
9.8
0%
Mar 10
Memory corruption in Bluetooth HOST while processing the AVRC_PDU_GET_PLAYER_APP_VALUE_TEXT AVRCP response
Affected: All versions, or not specified
CVE-2022-40515
9.8
0%
Mar 10
Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms
Affected: All versions, or not specified
CVE-2022-33234
9.8
0%
Nov 15
Memory corruption in video due to configuration weakness
Affected: All versions, or not specified
CVE-2022-25688
9.8
0%
Sep 16
Memory corruption in video due to buffer overflow while parsing ps video clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon…
Affected: All versions, or not specified
CVE-2022-25686
9.8
0%
Sep 16
Memory corruption in video module due to buffer overflow while processing WAV file in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT,…
Affected: All versions, or not specified
CVE-2022-25668
9.8
0%
Sep 2
Memory corruption in video driver due to double free while parsing ASF clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon…
Affected: All versions, or not specified
CVE-2022-25659
9.8
0%
Sep 2
Memory corruption due to buffer overflow while parsing MKV clips with invalid bitmap size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…
Affected: All versions, or not specified
CVE-2022-25658
9.8
0%
Sep 2
Memory corruption due to incorrect pointer arithmetic when attempting to change the endianness in video parser function in Snapdragon Auto, Snapdragon Compute, Snapdragon…
Affected: All versions, or not specified
CVE-2022-25657
9.8
0%
Sep 2
Memory corruption due to buffer overflow occurs while processing invalid MKV clip which has invalid seek header in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
Affected: All versions, or not specified
CVE-2022-22087
9.8
1%
Jun 14
memory corruption in video due to buffer overflow while parsing mkv clip with no codechecker in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…
Affected: All versions, or not specified
CVE-2022-22086
9.8
1%
Jun 14
Memory corruption in video due to double free while parsing 3gp clip with invalid meta data atoms in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
Affected: All versions, or not specified
CVE-2021-35081
9.8
1%
Jun 14
Possible buffer overflow due to improper validation of SSID length received from beacon or probe response during an IBSS session in Snapdragon Auto, Snapdragon Compute, Snapdragon…
Affected: All versions, or not specified
CVE-2021-30341
9.8
1%
Jun 14
Improper buffer size validation of DSM packet received can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…
Affected: All versions, or not specified
CVE-2021-35068
9.8
1%
Feb 11
Lack of null check while freeing the device information buffer in the Bluetooth HFP protocol can lead to a NULL pointer dereference in Snapdragon Auto, Snapdragon Compute,…
Affected: All versions, or not specified
CVE-2020-11264
9.8
13%
Sep 8
Improper authentication of Non-EAPOL/WAPI plaintext frames during four-way handshake can lead to arbitrary network packet injection in Snapdragon Auto, Snapdragon Compute,…
Affected: All versions, or not specified
CVE-2020-11307
9.8
1%
Jul 13
Buffer overflow in modem due to improper array index check before copying into it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…
Affected: All versions, or not specified
CVE-2023-33054
9.1
0%
Dec 5
Cryptographic issue in GPS HLOS Driver while downloading Qualcomm GNSS assistance data
Affected: All versions, or not specified
CVE-2021-35083
9.1
1%
Jun 14
Possible out of bound read due to improper validation of certificate chain in SSL or Internet key exchange in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
Affected: All versions, or not specified
CVE-2021-35117
9.1
1%
Apr 1
An Out of Bounds read may potentially occur while processing an IBSS beacon, in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon…
Affected: All versions, or not specified
CVE-2022-22088
8.8
1%
Jan 9
Memory corruption in Bluetooth HOST due to buffer overflow while parsing the command response received from remote
Affected: All versions, or not specified
CVE-2021-1942
8.8
0%
Apr 1
Improper handling of permissions of a shared memory region can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…
Affected: All versions, or not specified
CVE-2021-30285
8.8
0%
Jan 13
Improper validation of memory region in Hypervisor can lead to incorrect region mapping in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…
Affected: All versions, or not specified
CVE-2020-11210
8.8
0%
Apr 7
Possible memory corruption in RPM region due to improper XPU configuration in Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired…
Affected: All versions, or not specified
CVE-2021-1932
8.4
0%
Oct 20
Improper access control in trusted application environment can cause unauthorized access to CDSP or ADSP VM memory with either privilege in Snapdragon Auto, Snapdragon Compute,…
Affected: All versions, or not specified
CVE-2021-1913
8.4
0%
Oct 20
Possible integer overflow due to improper length check while updating grace period and count record in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
Affected: All versions, or not specified
CVE-2020-11263
8.2
0%
Jan 3
An integer overflow due to improper check performed after the address and size passed are aligned in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…
Affected: All versions, or not specified
CVE-2026-25267
7.8
0%
Oct 6
Missing Authorization in Core
Affected: All versions, or not specified
CVE-2025-59605
7.8
0%
Jun 1
Out-of-bounds Write in HLOS
Affected: All versions, or not specified
CVE-2025-47404
7.8
0%
May 4
Buffer Copy Without Checking Size of Input in Automotive Audio
Affected: All versions, or not specified
CVE-2025-59600
7.8
0%
Mar 2
Buffer Over-read in Graphics
Affected: All versions, or not specified
CVE-2025-47377
7.8
0%
Mar 2
Use After Free in Automotive Audio
Affected: All versions, or not specified
CVE-2025-47376
7.8
0%
Mar 2
Use After Free in Automotive Audio
Affected: All versions, or not specified
CVE-2025-47398
7.8
0%
Feb 2
Use After Free in Graphics
Affected: All versions, or not specified
CVE-2025-47397
7.8
0%
Feb 2
Improper Release of Memory Before Removing Last Reference in Graphics
Affected: All versions, or not specified
CVE-2025-47323
7.8
0%
Dec 18
Memory corruption while routing GPR packets between user and root when handling large data packet
Affected: All versions, or not specified
CVE-2025-47322
7.8
0%
Dec 18
Memory corruption while handling IOCTL calls to set mode
Affected: All versions, or not specified
CVE-2025-27063
7.8
0%
Dec 18
Memory corruption during video playback when video session open fails with time out error
Affected: All versions, or not specified
CVE-2025-21432
7.8
0%
Jul 8
Memory corruption while retrieving the CBOR data from TA
Affected: All versions, or not specified
CVE-2024-33060
7.8
0%
Sep 2
Use After Free in DSP Service
Affected: 0
CVE-2024-33052
7.8
0%
Sep 2
Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in FM Host
Affected: 0
Page 1 of 5 · 231 total
12…5