QF
Product
Qcm6490 Firmware
On CISA KEVExploited in the wild
395
CVEs
3
On KEV
9.8
Max CVSS
5
New 30D
Severity mix
Critical 26High 312Medium 57Low 0
Watch
Add Qcm6490 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-21423 | 7.8 | Apr 7 | Improper Validation of Array Index in Display Affected: All versions, or not specified |
| CVE-2025-21421 | 7.8 | Apr 7 | Buffer Over-read in Display Affected: All versions, or not specified |
| CVE-2024-49834 | 7.8 | Feb 3 | Improper Validation of Array Index in Camera Affected: All versions, or not specified |
| CVE-2024-45573 | 7.8 | Feb 3 | Use of Out-of-range Pointer Offset in Display Affected: All versions, or not specified |
| CVE-2024-38420 | 7.8 | Feb 3 | Improper Input Validation in Hypervisor Affected: All versions, or not specified |
| CVE-2024-45542 | 7.8 | Jan 6 | Stack-based Buffer Overflow in WLAN Windows Host Affected: All versions, or not specified |
| CVE-2024-45541 | 7.8 | Jan 6 | Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Windows Host Affected: All versions, or not specified |
| CVE-2024-43050 | 7.8 | Dec 2 | Stack-based Buffer Overflow in WLAN Windows Host Affected: 0 |
| CVE-2024-33044 | 7.8 | Dec 2 | Improper Validation of Array Index in Hypervisor Affected: 0 |
| CVE-2024-38423 | 7.8 | Nov 4 | Buffer Copy Without Checking Size of Input in Graphics Linux Affected: 0 |
| CVE-2024-38419 | 7.8 | Nov 4 | Use After Free in Automotive GPU Affected: 0 |
| CVE-2024-38415 | 7.8 | Nov 4 | Use After Free in Computer Vision Affected: 0 |
| CVE-2024-38410 | 7.8 | Nov 4 | Stack-based Buffer Overflow in WLAN Windows Host Affected: 0 |
| CVE-2024-38409 | 7.8 | Nov 4 | Buffer Copy Without Checking Size of Input in WLAN Windows Host Affected: 0 |
| CVE-2024-33065 | 7.8 | Oct 7 | Improper Input Validation in Camera Affected: 0 |
| CVE-2024-23369 | 7.8 | Oct 7 | Improper Restriction of Operations within the Bounds of a Memory Buffer in HLOS Affected: 0 |
| CVE-2024-38402 | 7.8 | Sep 2 | Use After Free in DSP Services Affected: 0 |
| CVE-2024-33060 | 7.8 | Sep 2 | Use After Free in DSP Service Affected: 0 |
| CVE-2024-33054 | 7.8 | Sep 2 | Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Computer Vision Affected: 0 |
| CVE-2024-33052 | 7.8 | Sep 2 | Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in FM Host Affected: 0 |
| CVE-2024-33047 | 7.8 | Sep 2 | Buffer Over-read in Display Affected: 0 |
| CVE-2024-33045 | 7.8 | Sep 2 | Return of Stack Variable Address in Buses Affected: 0 |
| CVE-2024-33042 | 7.8 | Sep 2 | Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in FM Host Affected: 0 |
| CVE-2024-33038 | 7.8 | Sep 2 | Untrusted Pointer Dereference in Computer Vision Affected: 0 |
| CVE-2024-33034 | 7.8 | Aug 5 | Use After Free in Graphics Linux Affected: 0 |
| CVE-2024-33028 | 7.8 | Aug 5 | Use After Free in Automotive Telematics Affected: 0 |
| CVE-2024-33023 | 7.8 | Aug 5 | Use After Free in Graphics Linux Affected: 0 |
| CVE-2024-33021 | 7.8 | Aug 5 | Use of Uninitialized Variable in Automotive GPU Affected: 0 |
| CVE-2024-23383 | 7.8 | Aug 5 | Use After Free in Graphics Linux Affected: 0 |
| CVE-2024-23382 | 7.8 | Aug 5 | Use After Free in Graphics Linux Affected: 0 |
| CVE-2024-23381 | 7.8 | Aug 5 | Use After Free in Graphics Linux Affected: 0 |
| CVE-2024-23356 | 7.8 | Aug 5 | Improper Restriction of Operations within the Bounds of a Memory Buffer in HLOS Affected: 0 |
| CVE-2024-23355 | 7.8 | Aug 5 | Improper Restriction of Operations within the Bounds of a Memory Buffer in Automotive Affected: 0 |
| CVE-2024-23380 | 7.8 | Jul 1 | Use After Free in Graphics Affected: 0 |
| CVE-2024-23373 | 7.8 | Jul 1 | Use After Free in Graphics Affected: 0 |
| CVE-2024-23372 | 7.8 | Jul 1 | Integer Overflow or Wraparound in Graphics Affected: 0 |
| CVE-2024-21469 | 7.8 | Jul 1 | Permissions, Privileges, and Access Control issues in TZ Secure OS Affected: 0 |
| CVE-2024-21465 | 7.8 | Jul 1 | Buffer Over-read in Trusted Execution Environment Affected: 0 |
| CVE-2023-43554 | 7.8 | Jul 1 | Improper Restriction of Operations withing the Bounds of a Memory Buffer in DSP Services Affected: 0 |
| CVE-2023-43542 | 7.8 | Jun 3 | Buffer Copy Without Checking Size of Input in Trusted Execution Environment Affected: 0 |
| CVE-2024-23351 | 7.8 | May 6 | Improper Access Control in Graphics Linux Affected: All versions, or not specified |
| CVE-2024-21475 | 7.8 | May 6 | Use of Out-of-range Pointer Offset in Video Affected: All versions, or not specified |
| CVE-2024-21471 | 7.8 | May 6 | Use After Free in Graphics Linux Affected: 0 |
| CVE-2023-43531 | 7.8 | May 6 | Access of Uninitialized Pointer in SPS Applications Affected: 0 |
| CVE-2023-43530 | 7.8 | May 6 | Integer Overflow or Wraparound in HLOS Affected: All versions, or not specified |
| CVE-2023-33115 | 7.8 | Apr 1 | Buffer Over-read in Trusted Execution Environment Affected: 0 |
| CVE-2023-43550 | 7.8 | Mar 4 | Integer Overflow or Wraparound in Core Services Affected: 0 |
| CVE-2023-43514 | 7.8 | Jan 2 | Memory corruption while invoking IOCTLs calls from user space for internal mem MAP and internal mem UNMAP Affected: All versions, or not specified |
| CVE-2023-33118 | 7.8 | Jan 2 | Memory corruption while processing Listen Sound Model client payload buffer when there is a request for Listen Sound session get parameter from ST HAL Affected: All versions, or not specified |
| CVE-2023-33117 | 7.8 | Jan 2 | Memory corruption when HLOS allocates the response payload buffer to copy the data received from ADSP in response to AVCS_LOAD_MODULE command Affected: All versions, or not specified |
