QF
Product
Qcm4490 Firmware
On CISA KEVExploited in the wild
139
CVEs
4
On KEV
9.8
Max CVSS
2
New 30D
Severity mix
Critical 15High 96Medium 28Low 0
Watch
Add Qcm4490 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-27034 | 9.8 | Sep 24 | Memory corruption while selecting the PLMN from SOR failed list Affected: All versions, or not specified |
| CVE-2025-21483 | 9.8 | Sep 24 | Memory corruption when the UE receives an RTP packet from the network, during the reassembly of NALUs Affected: All versions, or not specified |
| CVE-2024-21480 | 9.8 | May 6 | Memory corruption while playing audio file having large-sized input buffer Affected: All versions, or not specified |
| CVE-2024-21463 | 9.8 | Apr 1 | Memory corruption while processing Codec2 during v13k decoder pitch synthesis Affected: All versions, or not specified |
| CVE-2023-43548 | 9.8 | Mar 4 | Memory corruption while parsing qcp clip with invalid chunk data size Affected: All versions, or not specified |
| CVE-2023-28582 | 9.8 | Mar 4 | Memory corruption in Data Modem while verifying hello-verify message during the DTLS handshake Affected: All versions, or not specified |
| CVE-2023-43519 | 9.8 | Feb 6 | Memory corruption in video while parsing the Videoinfo, when the size of atom is greater than the videoinfo size Affected: All versions, or not specified |
| CVE-2023-43518 | 9.8 | Feb 6 | Memory corruption in video while parsing invalid mp2 clip Affected: All versions, or not specified |
| CVE-2023-33025 | 9.8 | Jan 2 | Memory corruption in Data Modem when a non-standard SDP body, during a VOLTE call Affected: All versions, or not specified |
| CVE-2023-22388 | 9.8 | Nov 7 | Memory Corruption in Multi-mode Call Processor while processing bit mask API Affected: All versions, or not specified |
| CVE-2023-24855 | 9.8 | Oct 3 | Memory corruption in Modem while processing security related configuration before AS Security Exchange Affected: All versions, or not specified |
| CVE-2023-21631 | 9.8 | Jul 4 | Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network Affected: All versions, or not specified |
| CVE-2025-21450 | 9.1 | Jul 8 | Cryptographic issue occurs due to use of insecure connection method while downloading Affected: All versions, or not specified |
| CVE-2023-33058 | 9.1 | Feb 6 | Information disclosure in Modem while processing SIB5 Affected: All versions, or not specified |
| CVE-2023-33054 | 9.1 | Dec 5 | Cryptographic issue in GPS HLOS Driver while downloading Qualcomm GNSS assistance data Affected: All versions, or not specified |
Showing 15
