QF
Product
Qcm6490 Firmware
by Qualcomm · last CVE Oct 6, 2026
On CISA KEVExploited in the wild
384
CVEs
3
On KEV
9.8
Max CVSS
5
New 30D
Severity mix
Critical 26High 303Medium 55Low 0
Watch

Add Qcm6490 Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-33107
In wildKEV
7.8
1%
Dec 5
Integer Overflow or Wraparound in Graphics Linux
Affected: 0
CVE-2023-33106
In wildKEV
7.8
1%
Dec 5
Use of Out-of-range Pointer Offset in Graphics
Affected: 0
CVE-2022-22071
In wildKEV
7.8
0%
Jun 14
Qualcomm Multiple Chipsets Use-After-Free Vulnerability
Affected: All versions, or not specified
CVE-2025-27034
9.8
0%
Sep 24
Improper Validation of Array Index in Multi-Mode Call Processor
Affected: All versions, or not specified
CVE-2025-21483
9.8
0%
Sep 24
Improper Restriction of Operations within the Bounds of a Memory Buffer in Data Network Stack & Connectivity
Affected: All versions, or not specified
CVE-2024-21480
9.8
0%
May 6
Memory corruption while playing audio file having large-sized input buffer
Affected: All versions, or not specified
CVE-2023-43548
9.8
0%
Mar 4
Memory corruption while parsing qcp clip with invalid chunk data size
Affected: All versions, or not specified
CVE-2023-43519
9.8
0%
Feb 6
Memory corruption in video while parsing the Videoinfo, when the size of atom is greater than the videoinfo size
Affected: All versions, or not specified
CVE-2023-43518
9.8
0%
Feb 6
Memory corruption in video while parsing invalid mp2 clip
Affected: All versions, or not specified
CVE-2023-22388
9.8
0%
Nov 7
Memory Corruption in Multi-mode Call Processor while processing bit mask API
Affected: All versions, or not specified
CVE-2023-24855
9.8
1%
Oct 3
Memory corruption in Modem while processing security related configuration before AS Security Exchange
Affected: All versions, or not specified
CVE-2023-21631
9.8
0%
Jul 4
Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network
Affected: All versions, or not specified
CVE-2022-40537
9.8
0%
Mar 10
Memory corruption in Bluetooth HOST while processing the AVRC_PDU_GET_PLAYER_APP_VALUE_TEXT AVRCP response
Affected: All versions, or not specified
CVE-2022-40515
9.8
0%
Mar 10
Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms
Affected: All versions, or not specified
CVE-2022-33256
9.8
1%
Mar 10
Memory corruption due to improper validation of array index in Multi-mode call processor
Affected: All versions, or not specified
CVE-2022-33234
9.8
0%
Nov 15
Memory corruption in video due to configuration weakness
Affected: All versions, or not specified
CVE-2022-25688
9.8
0%
Sep 16
Memory corruption in video due to buffer overflow while parsing ps video clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon…
Affected: All versions, or not specified
CVE-2022-25686
9.8
0%
Sep 16
Memory corruption in video module due to buffer overflow while processing WAV file in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT,…
Affected: All versions, or not specified
CVE-2022-25659
9.8
0%
Sep 2
Memory corruption due to buffer overflow while parsing MKV clips with invalid bitmap size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…
Affected: All versions, or not specified
CVE-2022-25658
9.8
0%
Sep 2
Memory corruption due to incorrect pointer arithmetic when attempting to change the endianness in video parser function in Snapdragon Auto, Snapdragon Compute, Snapdragon…
Affected: All versions, or not specified
CVE-2022-25657
9.8
0%
Sep 2
Memory corruption due to buffer overflow occurs while processing invalid MKV clip which has invalid seek header in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
Affected: All versions, or not specified
CVE-2022-22087
9.8
1%
Jun 14
memory corruption in video due to buffer overflow while parsing mkv clip with no codechecker in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…
Affected: All versions, or not specified
CVE-2022-22086
9.8
1%
Jun 14
Memory corruption in video due to double free while parsing 3gp clip with invalid meta data atoms in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
Affected: All versions, or not specified
CVE-2021-35081
9.8
1%
Jun 14
Possible buffer overflow due to improper validation of SSID length received from beacon or probe response during an IBSS session in Snapdragon Auto, Snapdragon Compute, Snapdragon…
Affected: All versions, or not specified
CVE-2021-30341
9.8
1%
Jun 14
Improper buffer size validation of DSM packet received can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…
Affected: All versions, or not specified
CVE-2021-1946
9.8
1%
Sep 9
Null Pointer Dereference may occur due to improper validation while processing crafted SDP body in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
Affected: All versions, or not specified
CVE-2025-21450
9.1
0%
Jul 8
Cryptographic issue occurs due to use of insecure connection method while downloading
Affected: All versions, or not specified
CVE-2023-33054
9.1
0%
Dec 5
Cryptographic issue in GPS HLOS Driver while downloading Qualcomm GNSS assistance data
Affected: All versions, or not specified
CVE-2021-1981
9.1
1%
Nov 12
Possible buffer over read due to improper IE size check of Bearer capability IE in MT setup request from network in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
Affected: All versions, or not specified
CVE-2026-25268
8.8
0%
Jul 6
Stack-based Buffer Overflow in WLAN Host
Affected: All versions, or not specified
CVE-2026-25277
8.8
0%
Jun 1
Buffer Copy Without Checking Size of Input in Secure Processor
Affected: All versions, or not specified
CVE-2026-25276
8.8
0%
Jun 1
Improper Validation of Array Index in Secure Processor
Affected: All versions, or not specified
CVE-2023-43556
8.8
0%
Jun 3
Memory corruption in Hypervisor when platform information mentioned is not aligned
Affected: All versions, or not specified
CVE-2022-33288
8.8
0%
Apr 13
Memory corruption due to buffer copy without checking the size of input in Core while sending SCM command to get write protection information
Affected: All versions, or not specified
CVE-2022-22088
8.8
1%
Jan 9
Memory corruption in Bluetooth HOST due to buffer overflow while parsing the command response received from remote
Affected: All versions, or not specified
CVE-2021-1942
8.8
0%
Apr 1
Improper handling of permissions of a shared memory region can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…
Affected: All versions, or not specified
CVE-2021-30285
8.8
0%
Jan 13
Improper validation of memory region in Hypervisor can lead to incorrect region mapping in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…
Affected: All versions, or not specified
CVE-2025-47345
8.4
0%
Jan 6
Reusing a Nonce, Key Pair in Encryption in Automotive Platform
Affected: All versions, or not specified
CVE-2024-21481
8.4
0%
Aug 5
Memory corruption when preparing a shared memory notification for a memparcel in Resource Manager
Affected: All versions, or not specified
CVE-2021-35134
8.4
0%
Sep 2
Due to insufficient validation of ELF headers, an Incorrect Calculation of Buffer Size can occur in Boot leading to memory corruption in Snapdragon Connectivity, Snapdragon…
Affected: All versions, or not specified
CVE-2021-1917
8.4
0%
Oct 20
Null pointer dereference can occur due to memory allocation failure in DIAG in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon…
Affected: All versions, or not specified
CVE-2021-1913
8.4
0%
Oct 20
Possible integer overflow due to improper length check while updating grace period and count record in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
Affected: All versions, or not specified
CVE-2025-21427
8.2
0%
Jul 8
Information disclosure while decoding this RTP packet Payload when UE receives the RTP packet from the network
Affected: All versions, or not specified
CVE-2024-53026
8.2
0%
Jun 3
Information disclosure when an invalid RTCP packet is received during a VoLTE/VoWiFi IMS call
Affected: All versions, or not specified
CVE-2024-53020
8.2
0%
Jun 3
Information disclosure may occur while decoding the RTP packet with invalid header extension from network
Affected: All versions, or not specified
CVE-2024-45552
8.2
0%
Apr 7
Information disclosure may occur during a video call if a device resets due to a non-conforming RTCP packet that doesn`t adhere to RFC standards
Affected: All versions, or not specified
CVE-2024-23359
8.2
0%
Sep 2
Buffer Over-read in Multi Mode Call Processor
Affected: 0
CVE-2021-30347
8.1
1%
Jun 14
Improper integrity check can lead to race condition between tasks PDCP and RRC? right after a valid RRC Command packet has been received in Snapdragon Auto, Snapdragon Compute,…
Affected: All versions, or not specified
CVE-2026-57559
7.8
0%
Oct 6
Use After Free in DSP_Services
Affected: All versions, or not specified
CVE-2026-57555
7.8
0%
Oct 6
Use After Free in DSP Service
Affected: All versions, or not specified
Page 1 of 8 · 384 total
12…8