QF
Product
Qcm6490 Firmware
On CISA KEVExploited in the wild
395
CVEs
3
On KEV
9.8
Max CVSS
5
New 30D
Severity mix
Critical 26High 312Medium 57Low 0
Watch
Add Qcm6490 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-33058 | 7.5 | Apr 7 | Insufficient Granularity of Access Control in Core Affected: All versions, or not specified |
| CVE-2024-53027 | 7.5 | Mar 3 | Buffer Copy Without Checking Size of Input in WLAN Host Affected: All versions, or not specified |
| CVE-2024-49838 | 7.5 | Feb 3 | Buffer Over-read in WLAN HOST Affected: All versions, or not specified |
| CVE-2024-38397 | 7.5 | Oct 7 | Buffer Over-read in WLAN Host Communication Affected: 0 |
| CVE-2024-23364 | 7.5 | Sep 2 | Buffer Over-read in WLAN Firmware Affected: All versions, or not specified |
| CVE-2024-33020 | 7.5 | Aug 5 | Buffer Over-read in WLAN HOST Affected: 0 |
| CVE-2024-23352 | 7.5 | Aug 5 | Loop with Unreachable Exit Condition (`Infinite Loop`) in Multi Mode Call Processor Affected: 0 |
| CVE-2023-43555 | 7.5 | Jun 3 | Buffer Over-read in Video Affected: All versions, or not specified |
| CVE-2023-43529 | 7.5 | May 6 | Reachable Assertion in Data Modem Affected: All versions, or not specified |
| CVE-2023-33101 | 7.5 | Apr 1 | Incorrect Type Conversion or Cast in Multi-Mode Call Processor Affected: All versions, or not specified |
| CVE-2023-33099 | 7.5 | Apr 1 | Improper Input Validation in Multi-Mode Call Processor Affected: All versions, or not specified |
| CVE-2023-33104 | 7.5 | Mar 4 | Improper input Validation in Multi-Mode Call Processor Affected: 0 |
| CVE-2023-33096 | 7.5 | Mar 4 | Reachable Assertion in Multi-Mode Call Processor Affected: 0 |
| CVE-2023-33095 | 7.5 | Mar 4 | Reachable Assertion in Multi-Mode Call Processor Affected: 0 |
| CVE-2023-33086 | 7.5 | Mar 4 | Improper Release of Memory Before Removing Last Reference in Data Modem Affected: 0 |
| CVE-2023-33057 | 7.5 | Feb 6 | Improper Input Validation in Multi-Mode Call Processor Affected: All versions, or not specified |
| CVE-2023-33049 | 7.5 | Feb 6 | Improper Release of Memory Before Removing Last Reference in Multi-Mode Call Processor Affected: All versions, or not specified |
| CVE-2023-33112 | 7.5 | Jan 2 | Buffer Over-read in WLAN Firmware Affected: All versions, or not specified |
| CVE-2023-33040 | 7.5 | Jan 2 | Buffer Over-read in Data Modem Affected: All versions, or not specified |
| CVE-2023-33044 | 7.5 | Dec 5 | Reachable Assertion in Data Modem Affected: All versions, or not specified |
| CVE-2023-33043 | 7.5 | Dec 5 | Reachable Assertion in Modem Affected: All versions, or not specified |
| CVE-2023-33042 | 7.5 | Dec 5 | Improper Input Validation in Modem Affected: All versions, or not specified |
| CVE-2023-28588 | 7.5 | Dec 5 | Integer Overflow or Wraparound in Bluetooth Host Affected: All versions, or not specified |
| CVE-2023-28540 | 7.5 | Oct 3 | Cryptographic issue in Data Modem due to improper authentication during TLS handshake Affected: All versions, or not specified |
| CVE-2023-24843 | 7.5 | Oct 3 | Transient DOS in Modem while triggering a camping on an 5G cell Affected: All versions, or not specified |
| CVE-2023-21646 | 7.5 | Sep 5 | Transient DOS in Modem while processing invalid System Information Block 1 Affected: All versions, or not specified |
| CVE-2023-21660 | 7.5 | Jun 6 | Transient DOS in WLAN Firmware while parsing FT Information Elements Affected: All versions, or not specified |
| CVE-2022-40536 | 7.5 | Jun 6 | Transient DOS due to improper authentication in modem while receiving plain TLB OTA request message from network Affected: All versions, or not specified |
| CVE-2022-33251 | 7.5 | Jun 6 | Transient DOS due to reachable assertion in Modem because of invalid network configuration Affected: All versions, or not specified |
| CVE-2022-22060 | 7.5 | Jun 6 | Assertion occurs while processing Reconfiguration message due to improper validation Affected: All versions, or not specified |
| CVE-2022-40504 | 7.5 | May 2 | Transient DOS due to reachable assertion in Modem when UE received Downlink Data Indication message from the network Affected: All versions, or not specified |
| CVE-2022-34144 | 7.5 | May 2 | Transient DOS due to reachable assertion in Modem during OSI decode scheduling Affected: All versions, or not specified |
| CVE-2022-33305 | 7.5 | May 2 | Transient DOS due to NULL pointer dereference in Modem while sending invalid messages in DCCH Affected: All versions, or not specified |
| CVE-2022-40503 | 7.5 | Apr 13 | Information disclosure due to buffer over-read in Bluetooth Host while A2DP streaming Affected: All versions, or not specified |
| CVE-2022-40527 | 7.5 | Mar 10 | Transient DOS due to reachable assertion in WLAN while processing PEER ID populated by TQM Affected: All versions, or not specified |
| CVE-2022-33272 | 7.5 | Mar 10 | Transient DOS in modem due to reachable assertion Affected: All versions, or not specified |
| CVE-2022-33254 | 7.5 | Mar 10 | Transient DOS due to reachable assertion in Modem while processing SIB1 Message Affected: All versions, or not specified |
| CVE-2022-33250 | 7.5 | Mar 10 | Transient DOS due to reachable assertion in modem when network repeatedly sent invalid message container for NR to LTE handover Affected: All versions, or not specified |
| CVE-2022-33244 | 7.5 | Mar 10 | Transient DOS due to reachable assertion in modem during MIB reception and SIB timeout Affected: All versions, or not specified |
| CVE-2022-25692 | 7.5 | Dec 13 | Denial of service in Modem due to reachable assertion while processing the common config procedure in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2022-25685 | 7.5 | Dec 13 | Denial of service in Modem module due to improper authorization while error handling in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT,… Affected: All versions, or not specified |
| CVE-2022-25741 | 7.5 | Nov 15 | Denial of service in WLAN due to potential null pointer dereference while accessing the memory location in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2022-25706 | 7.5 | Sep 16 | Information disclosure in Bluetooth driver due to buffer over-read while reading l2cap length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2022-25690 | 7.5 | Sep 16 | Information disclosure in WLAN due to improper validation of array index while parsing crafted ANQP action frames in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2022-25669 | 7.5 | Sep 16 | Denial of service in video due to buffer over read while parsing MP4 clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2022-22083 | 7.5 | Jun 14 | Denial of service due to memory corruption while extracting ape header from clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2022-22065 | 7.5 | Jun 14 | Out of bound read in WLAN HOST due to improper length check can lead to DOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics… Affected: All versions, or not specified |
| CVE-2021-35100 | 7.5 | Jun 14 | Possible buffer over read due to improper calculation of string length while parsing Id3 tag in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2021-35096 | 7.5 | Jun 14 | Improper memory allocation during counter check DLM handling can lead to denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial… Affected: All versions, or not specified |
| CVE-2021-35087 | 7.5 | Jun 14 | Possible null pointer access due to improper validation of system information message to be processed in Snapdragon Industrial IOT, Snapdragon Mobile Affected: All versions, or not specified |