QF
Product
Qcs6490 Firmware
On CISA KEVExploited in the wild
333
CVEs
3
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 23High 270Medium 40Low 0
Watch
Add Qcs6490 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-33016 | 6.8 | Sep 2 | Improper Restriction of Operations within the Bounds of a Memory Buffer in Storage Affected: All versions, or not specified |
| CVE-2023-21629 | 6.8 | Jul 4 | Memory Corruption in Modem due to double free while parsing the PKCS15 sim files Affected: All versions, or not specified |
| CVE-2021-35097 | 6.8 | Sep 2 | Possible authentication bypass due to improper order of signature verification and hashing in the signature verification call in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2025-47337 | 6.7 | Jan 6 | Use After Free in Camera Driver Affected: All versions, or not specified |
| CVE-2025-47335 | 6.7 | Jan 6 | Buffer Copy Without Checking Size of Input in Camera Driver Affected: All versions, or not specified |
| CVE-2021-30299 | 6.7 | Nov 22 | Improper Input Validation in Audio Affected: 0 |
| CVE-2021-35133 | 6.7 | Sep 2 | Use after free in the synx driver issue while performing other functions during multiple invocation of synx release calls in Snapdragon Connectivity, Snapdragon Industrial IOT,… Affected: All versions, or not specified |
| CVE-2021-35120 | 6.7 | Jun 14 | Improper handling between export and release functions on the same handle from client can lead to use after free in Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-35118 | 6.7 | Jun 14 | An out-of-bounds write can occur due to an incorrect input check in the camera driver in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2025-21464 | 6.5 | Aug 6 | Out-of-bounds Read in Core Affected: All versions, or not specified |
| CVE-2024-43056 | 6.5 | Mar 3 | Buffer Over-read in Hypervisor Affected: All versions, or not specified |
| CVE-2024-38405 | 6.5 | Nov 4 | Buffer Over-read in WLAN Host Affected: 0 |
| CVE-2024-33068 | 6.5 | Nov 4 | Use After Free in WLAN Host Communication Affected: 0 |
| CVE-2021-30348 | 6.5 | Jan 3 | Improper validation of LLM utility timers availability can lead to denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2021-1918 | 6.5 | Jan 3 | Improper handling of resource allocation in virtual machines can lead to information exposure in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile Affected: All versions, or not specified |
| CVE-2021-1960 | 6.5 | Sep 9 | Improper handling of ASB-C broadcast packets with crafted opcode in LMP can lead to uncontrolled resource consumption in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2025-47344 | 6.4 | Jan 6 | Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver Affected: All versions, or not specified |
| CVE-2025-27036 | 6.1 | Sep 24 | Buffer Over-read in Video Affected: All versions, or not specified |
| CVE-2025-27033 | 6.1 | Sep 24 | Buffer Over-read in Video Affected: All versions, or not specified |
| CVE-2022-33270 | 5.9 | Apr 13 | Transient DOS due to time-of-check time-of-use race condition in Modem while processing RRC Reconfiguration message Affected: All versions, or not specified |
| CVE-2021-30343 | 5.9 | Jun 14 | Improper integrity check can lead to race condition between tasks PDCP and RRC? after a valid RRC Command packet has been received in Snapdragon Auto, Snapdragon Compute,… Affected: All versions, or not specified |
| CVE-2025-27049 | 5.5 | Oct 9 | Buffer Over-read in Camera Affected: All versions, or not specified |
| CVE-2025-27041 | 5.5 | Oct 9 | Buffer Over-read in Video Affected: All versions, or not specified |
| CVE-2024-33043 | 5.5 | Sep 2 | Buffer Over-read in FM Host Affected: All versions, or not specified |
| CVE-2022-40533 | 5.5 | Jun 6 | Transient DOS due to untrusted Pointer Dereference in core while sending USB QMI request Affected: All versions, or not specified |
| CVE-2022-40523 | 5.5 | Jun 6 | Information disclosure in Kernel due to indirect branch misprediction Affected: All versions, or not specified |
| CVE-2022-40518 | 5.5 | Jan 9 | Information disclosure due to buffer overread in Core Affected: All versions, or not specified |
| CVE-2022-25725 | 5.5 | Jan 9 | Denial of service in MODEM due to improper pointer handling Affected: All versions, or not specified |
| CVE-2022-25675 | 5.5 | Dec 13 | Denial of service due to reachable assertion in modem while processing filter rule from application client in Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile Affected: All versions, or not specified |
| CVE-2022-25679 | 5.5 | Nov 15 | Denial of service in video due to improper access control in broadcast receivers in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile,… Affected: All versions, or not specified |
| CVE-2022-25676 | 5.5 | Nov 15 | Information disclosure in video due to buffer over-read while parsing avi files in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT,… Affected: All versions, or not specified |
| CVE-2022-25653 | 5.5 | Sep 16 | Information disclosure in video due to buffer over-read while processing avi file in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial… Affected: All versions, or not specified |
| CVE-2021-35135 | 5.5 | Sep 2 | A null pointer dereference may potentially occur during RSA key import in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-35119 | 5.5 | Jun 14 | Potential out of Bounds read in FIPS event processing due to improper validation of the length from the firmware in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2021-30339 | 5.5 | Jun 14 | Reading PRNG output may lead to improper key generation due to lack of buffer validation in Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-30331 | 5.5 | Apr 1 | Possible buffer overflow due to improper data validation of external commands sent via DIAG interface in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-30314 | 5.5 | Jan 13 | Lack of validation for third party application accessing the service can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-30283 | 5.5 | Jan 3 | Possible denial of service due to improper handling of debug register trap from user applications in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile Affected: All versions, or not specified |
| CVE-2021-30278 | 5.5 | Jan 3 | Improper input validation in TrustZone memory transfer interface can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-30294 | 5.5 | Sep 9 | Potential null pointer dereference in KGSL GPU auxiliary command due to improper validation of user input in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Industrial IOT,… Affected: All versions, or not specified |
Showing 40