QF
Product
Qcm6490 Firmware
On CISA KEVExploited in the wild
384
CVEs
3
On KEV
9.8
Max CVSS
5
New 30D
Severity mix
Critical 26High 303Medium 55Low 0
Watch
Add Qcm6490 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-33107 In wildKEV | 7.8 | Dec 5 | Integer Overflow or Wraparound in Graphics Linux Affected: 0 |
| CVE-2023-33106 In wildKEV | 7.8 | Dec 5 | Use of Out-of-range Pointer Offset in Graphics Affected: 0 |
| CVE-2022-22071 In wildKEV | 7.8 | Jun 14 | Qualcomm Multiple Chipsets Use-After-Free Vulnerability Affected: All versions, or not specified |
| CVE-2025-27034 | 9.8 | Sep 24 | Memory corruption while selecting the PLMN from SOR failed list Affected: All versions, or not specified |
| CVE-2025-21483 | 9.8 | Sep 24 | Memory corruption when the UE receives an RTP packet from the network, during the reassembly of NALUs Affected: All versions, or not specified |
| CVE-2024-21480 | 9.8 | May 6 | Memory corruption while playing audio file having large-sized input buffer Affected: All versions, or not specified |
| CVE-2023-43548 | 9.8 | Mar 4 | Memory corruption while parsing qcp clip with invalid chunk data size Affected: All versions, or not specified |
| CVE-2023-43519 | 9.8 | Feb 6 | Memory corruption in video while parsing the Videoinfo, when the size of atom is greater than the videoinfo size Affected: All versions, or not specified |
| CVE-2023-43518 | 9.8 | Feb 6 | Memory corruption in video while parsing invalid mp2 clip Affected: All versions, or not specified |
| CVE-2023-22388 | 9.8 | Nov 7 | Memory Corruption in Multi-mode Call Processor while processing bit mask API Affected: All versions, or not specified |
| CVE-2023-24855 | 9.8 | Oct 3 | Memory corruption in Modem while processing security related configuration before AS Security Exchange Affected: All versions, or not specified |
| CVE-2023-21631 | 9.8 | Jul 4 | Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network Affected: All versions, or not specified |
| CVE-2022-40537 | 9.8 | Mar 10 | Memory corruption in Bluetooth HOST while processing the AVRC_PDU_GET_PLAYER_APP_VALUE_TEXT AVRCP response Affected: All versions, or not specified |
| CVE-2022-40515 | 9.8 | Mar 10 | Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms Affected: All versions, or not specified |
| CVE-2022-33256 | 9.8 | Mar 10 | Memory corruption due to improper validation of array index in Multi-mode call processor Affected: All versions, or not specified |
| CVE-2022-33234 | 9.8 | Nov 15 | Memory corruption in video due to configuration weakness Affected: All versions, or not specified |
| CVE-2022-25688 | 9.8 | Sep 16 | Memory corruption in video due to buffer overflow while parsing ps video clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2022-25686 | 9.8 | Sep 16 | Memory corruption in video module due to buffer overflow while processing WAV file in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT,… Affected: All versions, or not specified |
| CVE-2022-25659 | 9.8 | Sep 2 | Memory corruption due to buffer overflow while parsing MKV clips with invalid bitmap size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2022-25658 | 9.8 | Sep 2 | Memory corruption due to incorrect pointer arithmetic when attempting to change the endianness in video parser function in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2022-25657 | 9.8 | Sep 2 | Memory corruption due to buffer overflow occurs while processing invalid MKV clip which has invalid seek header in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2022-22087 | 9.8 | Jun 14 | memory corruption in video due to buffer overflow while parsing mkv clip with no codechecker in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2022-22086 | 9.8 | Jun 14 | Memory corruption in video due to double free while parsing 3gp clip with invalid meta data atoms in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-35081 | 9.8 | Jun 14 | Possible buffer overflow due to improper validation of SSID length received from beacon or probe response during an IBSS session in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-30341 | 9.8 | Jun 14 | Improper buffer size validation of DSM packet received can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2021-1946 | 9.8 | Sep 9 | Null Pointer Dereference may occur due to improper validation while processing crafted SDP body in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2025-21450 | 9.1 | Jul 8 | Cryptographic issue occurs due to use of insecure connection method while downloading Affected: All versions, or not specified |
| CVE-2023-33054 | 9.1 | Dec 5 | Cryptographic issue in GPS HLOS Driver while downloading Qualcomm GNSS assistance data Affected: All versions, or not specified |
| CVE-2021-1981 | 9.1 | Nov 12 | Possible buffer over read due to improper IE size check of Bearer capability IE in MT setup request from network in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2026-25268 | 8.8 | Jul 6 | Stack-based Buffer Overflow in WLAN Host Affected: All versions, or not specified |
| CVE-2026-25277 | 8.8 | Jun 1 | Buffer Copy Without Checking Size of Input in Secure Processor Affected: All versions, or not specified |
| CVE-2026-25276 | 8.8 | Jun 1 | Improper Validation of Array Index in Secure Processor Affected: All versions, or not specified |
| CVE-2023-43556 | 8.8 | Jun 3 | Memory corruption in Hypervisor when platform information mentioned is not aligned Affected: All versions, or not specified |
| CVE-2022-33288 | 8.8 | Apr 13 | Memory corruption due to buffer copy without checking the size of input in Core while sending SCM command to get write protection information Affected: All versions, or not specified |
| CVE-2022-22088 | 8.8 | Jan 9 | Memory corruption in Bluetooth HOST due to buffer overflow while parsing the command response received from remote Affected: All versions, or not specified |
| CVE-2021-1942 | 8.8 | Apr 1 | Improper handling of permissions of a shared memory region can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2021-30285 | 8.8 | Jan 13 | Improper validation of memory region in Hypervisor can lead to incorrect region mapping in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2025-47345 | 8.4 | Jan 7 | Cryptographic issue may occur while encrypting license data Affected: All versions, or not specified |
| CVE-2024-21481 | 8.4 | Aug 5 | Memory corruption when preparing a shared memory notification for a memparcel in Resource Manager Affected: All versions, or not specified |
| CVE-2021-35134 | 8.4 | Sep 2 | Due to insufficient validation of ELF headers, an Incorrect Calculation of Buffer Size can occur in Boot leading to memory corruption in Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1917 | 8.4 | Oct 20 | Null pointer dereference can occur due to memory allocation failure in DIAG in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1913 | 8.4 | Oct 20 | Possible integer overflow due to improper length check while updating grace period and count record in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2025-21427 | 8.2 | Jul 8 | Information disclosure while decoding this RTP packet Payload when UE receives the RTP packet from the network Affected: All versions, or not specified |
| CVE-2024-53026 | 8.2 | Jun 3 | Information disclosure when an invalid RTCP packet is received during a VoLTE/VoWiFi IMS call Affected: All versions, or not specified |
| CVE-2024-53020 | 8.2 | Jun 3 | Information disclosure may occur while decoding the RTP packet with invalid header extension from network Affected: All versions, or not specified |
| CVE-2024-45552 | 8.2 | Apr 7 | Information disclosure may occur during a video call if a device resets due to a non-conforming RTCP packet that doesn`t adhere to RFC standards Affected: All versions, or not specified |
| CVE-2024-23359 | 8.2 | Sep 2 | Buffer Over-read in Multi Mode Call Processor Affected: 0 |
| CVE-2021-30347 | 8.1 | Jun 14 | Improper integrity check can lead to race condition between tasks PDCP and RRC? right after a valid RRC Command packet has been received in Snapdragon Auto, Snapdragon Compute,… Affected: All versions, or not specified |
| CVE-2026-57559 | 7.8 | Oct 6 | Use After Free in DSP_Services Affected: All versions, or not specified |
| CVE-2026-57555 | 7.8 | Oct 6 | Use After Free in DSP Service Affected: All versions, or not specified |
