QF
Product
Qcm6490 Firmware
On CISA KEVExploited in the wild
397
CVEs
3
On KEV
9.8
Max CVSS
5
New 30D
Severity mix
Critical 26High 314Medium 57Low 0
Watch
Add Qcm6490 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-24075 | 7.0 | Sep 17 | Buffer Over-read in Qualcomm IPC Affected: All versions, or not specified |
| CVE-2026-25260 | 7.0 | Jun 1 | Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service Affected: All versions, or not specified |
| CVE-2025-27076 | 7.0 | Aug 6 | Time-of-check Time-of-use (TOCTOU) Race Condition in Display Affected: All versions, or not specified |
| CVE-2024-45560 | 7.0 | Feb 3 | Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Affected: All versions, or not specified |
| CVE-2024-38407 | 7.0 | Nov 4 | Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Affected: 0 |
| CVE-2024-38406 | 7.0 | Nov 4 | Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Affected: 0 |
| CVE-2023-33119 | 7.0 | May 6 | Time-of-check Time-of-use (TOCTOU) Race Condition in Hypervisor Affected: All versions, or not specified |
| CVE-2022-33257 | 7.0 | Mar 7 | Time-of-check time-of-use race condition in Core Affected: 0 |
| CVE-2022-33214 | 7.0 | Oct 17 | Memory corruption in display due to time-of-check time-of-use of metadata reserved size in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT,… Affected: All versions, or not specified |
| CVE-2022-25696 | 7.0 | Sep 16 | Memory corruption in display due to time-of-check time-of-use race condition during map or unmap in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2022-22094 | 7.0 | Sep 16 | memory corruption in Kernel due to race condition while getting mapping reference in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile Affected: All versions, or not specified |
| CVE-2022-22093 | 7.0 | Sep 16 | Memory corruption or temporary denial of service due to improper handling of concurrent hypervisor operations to attach or detach IRQs from virtual interrupt sources in Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1921 | 7.0 | Nov 12 | Possible memory corruption due to Improper handling of hypervisor unmap operations for concurrent memory operations in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-30290 | 7.0 | Sep 9 | Possible null pointer dereference due to race condition between timeline fence signal and time line fence destroy in Snapdragon Auto, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |