QF
Product
Qcm6490 Firmware
On CISA KEVExploited in the wild
397
CVEs
3
On KEV
9.8
Max CVSS
5
New 30D
Severity mix
Critical 26High 314Medium 57Low 0
Watch
Add Qcm6490 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-30318 | 7.8 | Feb 11 | Improper validation of input when provisioning the HDCP key can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2021-30317 | 7.8 | Feb 11 | Improper validation of program headers containing ELF metadata can lead to image verification bypass in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-30319 | 7.8 | Jan 13 | Possible integer overflow due to improper validation of command length parameters while processing WMI command in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2021-30311 | 7.8 | Jan 13 | Possible heap overflow due to lack of index validation before allocating and writing to heap buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-30336 | 7.8 | Jan 3 | Possible out of bound read due to lack of domain input validation while processing APK close session request in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2021-30282 | 7.8 | Jan 3 | Possible out of bound write in RAM partition table due to improper validation on number of partitions provided in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2021-30279 | 7.8 | Jan 3 | Possible access control violation while setting current permission for VMIDs due to improper permission masking in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2021-30276 | 7.8 | Jan 3 | Improper access control while doing XPU re-configuration dynamically can lead to unauthorized access to a secure resource in Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2021-30275 | 7.8 | Jan 3 | Possible integer overflow in page alignment interface due to lack of address and size validation before alignment in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2021-30274 | 7.8 | Jan 3 | Possible integer overflow in access control initialization interface due to lack and size and address validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2021-30269 | 7.8 | Jan 3 | Possible null pointer dereference due to lack of TLB validation for user provided address in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2021-1894 | 7.8 | Jan 3 | Improper access control in TrustZone due to improper error handling while handling the signing key in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-30259 | 7.8 | Nov 12 | Possible out of bound access due to improper validation of function table entries in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2021-1979 | 7.8 | Nov 12 | Possible buffer overflow due to improper validation of FTM command payload in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-30316 | 7.8 | Oct 20 | Possible out of bound memory access due to improper boundary check while creating HSYNC fence in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-30305 | 7.8 | Oct 20 | Possible out of bound access due to lack of validation of page offset before page is inserted in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-30258 | 7.8 | Oct 20 | Possible buffer overflow due to improper size calculation of payload received in VR service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2021-30257 | 7.8 | Oct 20 | Possible out of bound read or write in VR service due to lack of validation of DSP selection values in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2021-30256 | 7.8 | Oct 20 | Possible stack overflow due to improper validation of camera name length before copying the name in VR Service in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2021-1984 | 7.8 | Oct 20 | Possible buffer overflow due to improper validation of index value while processing the plugin block in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1983 | 7.8 | Oct 20 | Possible buffer overflow due to improper handling of negative data length while processing write request in VR service in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-30295 | 7.8 | Sep 9 | Possible heap overflow due to improper validation of local variable while storing current task information locally in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2021-1952 | 7.8 | Sep 9 | Possible buffer over read occurs due to lack of length check of request buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2025-21477 | 7.5 | Aug 6 | Improper Input Validation in Modem Affected: All versions, or not specified |
| CVE-2025-21452 | 7.5 | Aug 6 | Reachable Assertion in Modem Affected: All versions, or not specified |
| CVE-2025-21459 | 7.5 | May 6 | Buffer Over-read in WLAN Host Communication Affected: All versions, or not specified |
| CVE-2024-33058 | 7.5 | Apr 7 | Insufficient Granularity of Access Control in Core Affected: All versions, or not specified |
| CVE-2024-53027 | 7.5 | Mar 3 | Buffer Copy Without Checking Size of Input in WLAN Host Affected: All versions, or not specified |
| CVE-2024-49838 | 7.5 | Feb 3 | Buffer Over-read in WLAN HOST Affected: All versions, or not specified |
| CVE-2024-38397 | 7.5 | Oct 7 | Buffer Over-read in WLAN Host Communication Affected: 0 |
| CVE-2024-23364 | 7.5 | Sep 2 | Buffer Over-read in WLAN Firmware Affected: All versions, or not specified |
| CVE-2024-33020 | 7.5 | Aug 5 | Buffer Over-read in WLAN HOST Affected: 0 |
| CVE-2024-23352 | 7.5 | Aug 5 | Loop with Unreachable Exit Condition (`Infinite Loop`) in Multi Mode Call Processor Affected: 0 |
| CVE-2023-43555 | 7.5 | Jun 3 | Buffer Over-read in Video Affected: All versions, or not specified |
| CVE-2023-43529 | 7.5 | May 6 | Reachable Assertion in Data Modem Affected: All versions, or not specified |
| CVE-2023-33101 | 7.5 | Apr 1 | Incorrect Type Conversion or Cast in Multi-Mode Call Processor Affected: All versions, or not specified |
| CVE-2023-33099 | 7.5 | Apr 1 | Improper Input Validation in Multi-Mode Call Processor Affected: All versions, or not specified |
| CVE-2023-33104 | 7.5 | Mar 4 | Improper input Validation in Multi-Mode Call Processor Affected: 0 |
| CVE-2023-33096 | 7.5 | Mar 4 | Reachable Assertion in Multi-Mode Call Processor Affected: 0 |
| CVE-2023-33095 | 7.5 | Mar 4 | Reachable Assertion in Multi-Mode Call Processor Affected: 0 |
| CVE-2023-33086 | 7.5 | Mar 4 | Improper Release of Memory Before Removing Last Reference in Data Modem Affected: 0 |
| CVE-2023-33057 | 7.5 | Feb 6 | Improper Input Validation in Multi-Mode Call Processor Affected: All versions, or not specified |
| CVE-2023-33049 | 7.5 | Feb 6 | Improper Release of Memory Before Removing Last Reference in Multi-Mode Call Processor Affected: All versions, or not specified |
| CVE-2023-33112 | 7.5 | Jan 2 | Buffer Over-read in WLAN Firmware Affected: All versions, or not specified |
| CVE-2023-33040 | 7.5 | Jan 2 | Buffer Over-read in Data Modem Affected: All versions, or not specified |
| CVE-2023-33044 | 7.5 | Dec 5 | Reachable Assertion in Data Modem Affected: All versions, or not specified |
| CVE-2023-33043 | 7.5 | Dec 5 | Reachable Assertion in Modem Affected: All versions, or not specified |
| CVE-2023-33042 | 7.5 | Dec 5 | Improper Input Validation in Modem Affected: All versions, or not specified |
| CVE-2023-28588 | 7.5 | Dec 5 | Integer Overflow or Wraparound in Bluetooth Host Affected: All versions, or not specified |
| CVE-2023-28540 | 7.5 | Oct 3 | Improper Authentication in Data Modem Affected: All versions, or not specified |