QF
Product
Qcm4490 Firmware
On CISA KEVExploited in the wild
145
CVEs
4
On KEV
9.8
Max CVSS
2
New 30D
Severity mix
Critical 15High 101Medium 29Low 0
Watch
Add Qcm4490 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-21479 In wildKEV | 8.6 | Jun 3 | Incorrect Authorization in Graphics Affected: All versions, or not specified |
| CVE-2025-21480 In wildKEV | 8.6 | Jun 3 | Incorrect Authorization in Graphics Windows Affected: All versions, or not specified |
| CVE-2023-33107 In wildKEV | 7.8 | Dec 5 | Integer Overflow or Wraparound in Graphics Linux Affected: 0 |
| CVE-2023-33106 In wildKEV | 7.8 | Dec 5 | Use of Out-of-range Pointer Offset in Graphics Affected: 0 |
| CVE-2025-27034 | 9.8 | Sep 24 | Improper Validation of Array Index in Multi-Mode Call Processor Affected: All versions, or not specified |
| CVE-2025-21483 | 9.8 | Sep 24 | Improper Restriction of Operations within the Bounds of a Memory Buffer in Data Network Stack & Connectivity Affected: All versions, or not specified |
| CVE-2024-21480 | 9.8 | May 6 | Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Audio Affected: All versions, or not specified |
| CVE-2024-21463 | 9.8 | Apr 1 | Buffer Copy Without Checking Size of Input in Audio Affected: 0 |
| CVE-2023-43548 | 9.8 | Mar 4 | Buffer Copy Without Checking Size of Input in Video Affected: 0 |
| CVE-2023-28582 | 9.8 | Mar 4 | Buffer Copy Without Checking Size of Input in Data Modem Affected: 0 |
| CVE-2023-43519 | 9.8 | Feb 6 | Buffer Copy without Checking Size of Input (`Classic Buffer Overflow`) in Video Affected: 0 |
| CVE-2023-43518 | 9.8 | Feb 6 | Untrusted Pointer Dereference in Video Affected: 0 |
| CVE-2023-33025 | 9.8 | Jan 2 | Memory corruption in Data Modem when a non-standard SDP body, during a VOLTE call Affected: All versions, or not specified |
| CVE-2023-22388 | 9.8 | Nov 7 | Memory Corruption in Multi-mode Call Processor while processing bit mask API Affected: All versions, or not specified |
| CVE-2023-24855 | 9.8 | Oct 3 | Memory corruption in Modem while processing security related configuration before AS Security Exchange Affected: All versions, or not specified |
| CVE-2023-21631 | 9.8 | Jul 4 | Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network Affected: All versions, or not specified |
| CVE-2025-21450 | 9.1 | Jul 8 | Improper Authentication in GPS_GNSS Affected: All versions, or not specified |
| CVE-2023-33058 | 9.1 | Feb 6 | Buffer Copy Without Checking Size of Input in Modem Affected: All versions, or not specified |
| CVE-2023-33054 | 9.1 | Dec 5 | Cryptographic issue in GPS HLOS Driver while downloading Qualcomm GNSS assistance data Affected: All versions, or not specified |
| CVE-2023-43556 | 8.8 | Jun 3 | Buffer Copy Without Checking Size of Input in Hypervisor Affected: All versions, or not specified |
| CVE-2024-33035 | 8.4 | Sep 2 | Integer Overflow or Wraparound in Display Affected: 0 |
| CVE-2024-23384 | 8.4 | Aug 5 | Use After Free in Graphics Linux Affected: 0 |
| CVE-2025-21488 | 8.2 | Sep 24 | Buffer Over-read in Data Network Stack & Connectivity Affected: All versions, or not specified |
| CVE-2024-53019 | 8.2 | Jun 3 | Buffer Over-read in Data Network Stack & Connectivity Affected: All versions, or not specified |
| CVE-2024-23359 | 8.2 | Sep 2 | Buffer Over-read in Multi Mode Call Processor Affected: 0 |
| CVE-2026-25267 | 7.8 | Oct 6 | Missing Authorization in Core Affected: All versions, or not specified |
| CVE-2025-59605 | 7.8 | Jun 1 | Out-of-bounds Write in HLOS Affected: All versions, or not specified |
| CVE-2025-47391 | 7.8 | Apr 6 | Stack-based Buffer Overflow in Camera Driver Affected: All versions, or not specified |
| CVE-2025-47398 | 7.8 | Feb 2 | Use After Free in Graphics Affected: All versions, or not specified |
| CVE-2025-47397 | 7.8 | Feb 2 | Improper Release of Memory Before Removing Last Reference in Graphics Affected: All versions, or not specified |
| CVE-2025-47323 | 7.8 | Dec 18 | Integer Overflow or Wraparound in Audio Affected: All versions, or not specified |
| CVE-2025-21432 | 7.8 | Jul 8 | Double Free in SPS-HLOS Affected: All versions, or not specified |
| CVE-2025-21422 | 7.8 | Jul 8 | Cryptographic Issues in Automotive Affected: All versions, or not specified |
| CVE-2025-21468 | 7.8 | May 6 | Out-of-bounds Write in Computer Vision Affected: All versions, or not specified |
| CVE-2024-45557 | 7.8 | Apr 7 | Use of Out-of-range Pointer Offset in Trust Management Engine Affected: All versions, or not specified |
| CVE-2024-49834 | 7.8 | Feb 3 | Improper Validation of Array Index in Camera Affected: All versions, or not specified |
| CVE-2024-49833 | 7.8 | Feb 3 | Improper Validation of Array Index in Camera Affected: All versions, or not specified |
| CVE-2024-45553 | 7.8 | Jan 6 | Use After Free in DSP Services Affected: All versions, or not specified |
| CVE-2024-21464 | 7.8 | Jan 6 | Buffer Copy Without Checking Size of Input in Data Network Stack & Connectivity Affected: All versions, or not specified |
| CVE-2024-38424 | 7.8 | Nov 4 | Use After Free in GPS Affected: 0 |
| CVE-2024-38415 | 7.8 | Nov 4 | Use After Free in Computer Vision Affected: 0 |
| CVE-2024-38402 | 7.8 | Sep 2 | Use After Free in DSP Services Affected: 0 |
| CVE-2024-33060 | 7.8 | Sep 2 | Use After Free in DSP Service Affected: 0 |
| CVE-2024-33052 | 7.8 | Sep 2 | Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in FM Host Affected: 0 |
| CVE-2024-33045 | 7.8 | Sep 2 | Return of Stack Variable Address in Buses Affected: 0 |
| CVE-2024-33042 | 7.8 | Sep 2 | Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in FM Host Affected: 0 |
| CVE-2024-33038 | 7.8 | Sep 2 | Untrusted Pointer Dereference in Computer Vision Affected: 0 |
| CVE-2024-33034 | 7.8 | Aug 5 | Use After Free in Graphics Linux Affected: 0 |
| CVE-2024-33023 | 7.8 | Aug 5 | Use After Free in Graphics Linux Affected: 0 |
| CVE-2024-23382 | 7.8 | Aug 5 | Use After Free in Graphics Linux Affected: 0 |
