QF
Product
Qcs4490 Firmware
On CISA KEVExploited in the wild
123
CVEs
3
On KEV
9.8
Max CVSS
2
New 30D
Severity mix
Critical 13High 85Medium 25Low 0
Watch
Add Qcs4490 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-33016 | 6.8 | Sep 2 | Improper Restriction of Operations within the Bounds of a Memory Buffer in Storage Affected: All versions, or not specified |
| CVE-2023-33014 | 6.8 | Jan 2 | Information disclosure in Core services while processing a Diag command Affected: All versions, or not specified |
| CVE-2023-21629 | 6.8 | Jul 4 | Memory Corruption in Modem due to double free while parsing the PKCS15 sim files Affected: All versions, or not specified |
| CVE-2026-25269 | 6.7 | Oct 6 | Out-of-bounds Write in Camera Driver Affected: All versions, or not specified |
| CVE-2024-49848 | 6.7 | Apr 7 | Memory corruption while processing multiple IOCTL calls from HLOS to DSP Affected: All versions, or not specified |
| CVE-2024-33032 | 6.7 | Nov 4 | Memory corruption when the user application modifies the same shared memory asynchronously when kernel is accessing it Affected: All versions, or not specified |
| CVE-2024-53015 | 6.6 | Jun 3 | Memory corruption while processing IOCTL command to handle buffers associated with a session Affected: All versions, or not specified |
| CVE-2026-24078 | 6.5 | Aug 4 | Exposure of Private Personal Information to an Unauthorized Actor in Data Modem Affected: All versions, or not specified |
| CVE-2025-47371 | 6.5 | Mar 2 | Reachable Assertion in Modem Affected: All versions, or not specified |
| CVE-2025-21465 | 6.5 | Aug 6 | Information disclosure while processing the hash segment in an MBN file Affected: All versions, or not specified |
| CVE-2025-21464 | 6.5 | Aug 6 | Information disclosure while reading data from an image using specified offset and size parameters Affected: All versions, or not specified |
| CVE-2024-43056 | 6.5 | Mar 3 | Transient DOS during hypervisor virtual I/O operation in a virtual machine Affected: All versions, or not specified |
| CVE-2025-47344 | 6.4 | Jan 6 | Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver Affected: All versions, or not specified |
| CVE-2025-47332 | 6.4 | Jan 6 | Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver Affected: All versions, or not specified |
| CVE-2024-33043 | 5.5 | Sep 2 | Buffer Over-read in FM Host Affected: All versions, or not specified |
| CVE-2023-33060 | 5.5 | Feb 6 | Transient DOS in Core when DDR memory check is called while DDR is not initialized Affected: All versions, or not specified |
| CVE-2023-33037 | 5.5 | Jan 2 | Cryptographic issue in Automotive while unwrapping the key secs2d and verifying with RPMB data Affected: All versions, or not specified |
| CVE-2023-28568 | 5.5 | Nov 7 | Information disclosure in WLAN HAL when reception status handler is called Affected: All versions, or not specified |
| CVE-2023-28566 | 5.5 | Nov 7 | Information disclosure in WLAN HAL while handling the WMI state info command Affected: All versions, or not specified |
| CVE-2022-40533 | 5.5 | Jun 6 | Transient DOS due to untrusted Pointer Dereference in core while sending USB QMI request Affected: All versions, or not specified |
| CVE-2022-40523 | 5.5 | Jun 6 | Information disclosure in Kernel due to indirect branch misprediction Affected: All versions, or not specified |
| CVE-2026-21384 | 5.3 | Jul 6 | Out-of-bounds Write in Camera Driver Affected: All versions, or not specified |
| CVE-2026-21370 | 5.3 | Jul 6 | Out-of-bounds Write in Camera Driver Affected: All versions, or not specified |
| CVE-2026-21369 | 5.3 | Jul 6 | Out-of-bounds Write in Camera Driver Affected: All versions, or not specified |
| CVE-2024-38426 | 5.3 | Mar 3 | While processing the authentication message in UE, improper authentication may lead to information disclosure Affected: All versions, or not specified |
Showing 25
