Qualcomm Qcm6490 Firmware vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Qualcomm Qcm6490 Firmware: 105 record(s), with affected versions and fixes.cpe:2.3:o:qualcomm:qcm6490_firmware
CVE-2026-57559
High · 7.8
CWE-416 Oct 6, 2026
Use After Free in DSP_Services
Memory corruption while processing service requests.
CVE-2026-57555
High · 7.8
CWE-416 Oct 6, 2026
Use After Free in DSP Service
Memory Corruption when executing system service routines due to improper handling of user input buffers.
CVE-2026-57554
High · 7.8
CWE-416 Oct 6, 2026
Use After Free in DSP Service
Memory Corruption when asynchronous threads access shared performance counter data simultaneously during FastRPC invocations.
CVE-2026-57545
High · 7.8
CWE-822 Oct 6, 2026
Untrusted Pointer Dereference in Graphics
Memory corruption when processing draw objects of incorrect type during graphics command list execution.
CVE-2026-25302
High · 7.1
CWE-347 Oct 6, 2026
Improper Verification of Cryptographic Signature in Boot
Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted and processed.
CVE-2026-25291
High · 7.8
CWE-416 Oct 6, 2026
Use After Free in Graphics
Memory corruption when performing concurrent operations on shared memory page lists due to lack of proper synchronization mechanisms.
CVE-2026-25274
Medium · 6.7
CWE-416 Oct 6, 2026
Use After Free in Windows WLAN Host
Memory Corruption when processing concurrent DMA buffer allocation and deallocation commands without proper synchronization.
CVE-2026-25272
Medium · 6.7
CWE-787 Oct 6, 2026
Out-of-bounds Write in Camera Driver
Memory Corruption when processing camera CRE driver operations with improper handling of buffer limits during hardware update preparation.
CVE-2026-25270
Medium · 6.7
CWE-787 Oct 6, 2026
Out-of-bounds Write in Camera Driver
Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver.
CVE-2026-25269
Medium · 6.7
CWE-787 Oct 6, 2026
Out-of-bounds Write in Camera Driver
Memory corruption when processing camera requests with excessive batch and IO buffer configurations exceeds allocated memory size.
CVE-2026-25267
High · 7.8
CWE-862 Oct 6, 2026
Missing Authorization in Core
Memory corruption when non-secure loader rewrites page tables before secure memory initialization.
CVE-2026-25263
Medium · 6.6
CWE-787 Oct 6, 2026
Out of Bounds write in Linux Camera
Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters.
CVE-2026-25280
High · 7.8
CWE-787 Sep 17, 2026
Out-of-bounds Write in DSP Service
Memory corruption when processing escape handling flow with insufficient user buffer sizes.
CVE-2026-25275
High · 7.5
CWE-126 Sep 17, 2026
Buffer Over-read in WLAN Firmware
Transient DOS when processing authentication frames with invalid FILS information element header lengths.
CVE-2026-25261
High · 7.8
CWE-822 Sep 17, 2026
Untrusted Pointer Dereference in Camera
Memory corruption while processing rear sensor IOCTL calls.
CVE-2026-24075
High · 7.0
CWE-126 Sep 17, 2026
Buffer Over-read in Qualcomm IPC
Memory Corruption when multiple threads issue concurrent IOCTL requests to the device control handler due to improper synchronization and race conditions.
CVE-2026-24074
High · 7.8
CWE-787 Sep 17, 2026
Out-of-bounds Write in Video
Memory Corruption when processing data with large offset and length values exceeds buffer limits during data copy operations.
CVE-2026-25292
High · 7.6
CWE-1286 Aug 4, 2026
Improper Validation of Syntactic Correctness of Input in Automotive Linux OS
Memory Corruption when processing untrusted user input in the fastboot command handler for audio framework configuration.
CVE-2026-24084
High · 7.5
CWE-1294 Aug 4, 2026
Insecure Security Identifier Mechanism in Multi-Mode Call Processor
Weak configuration when UE does not verify the consistency of its additional security capabilities with the replayed capabilities.
CVE-2026-24079
High · 8.1
CWE-306 Aug 4, 2026
Missing Authentication for Critical Function in Data Modem
Cryptographic Issue while processing registration requests with malformed or missing authentication parameters.
CVE-2026-24078
Medium · 6.5
CWE-359 Aug 4, 2026
Exposure of Private Personal Information to an Unauthorized Actor in Data Modem
Information Disclosure when IPSec negotiation fails or is not established properly during NG-eCall SIP signaling.
CVE-2026-24077
Medium · 6.5
CWE-191 Aug 4, 2026
Integer Underflow (Wrap or Wraparound) in WLAN Host
Information Disclosure when processing wireless network channel switch information with improperly formatted length fields.
CVE-2026-24076
Medium · 6.7
CWE-120 Aug 4, 2026
Buffer Copy Without Checking Size of Input in Bluetooth HOST
Memory Corruption when processing registry values with incorrect types using a direct query method.
CVE-2026-25268
High · 8.8
CWE-121 Jul 6, 2026
Stack-based Buffer Overflow in WLAN Host
Memory Corruption when processing invalid HT40 channel layouts during dynamic channel switching operations.
CVE-2026-21384
Medium · 5.3
CWE-787 Jul 6, 2026
Out-of-bounds Write in Camera Driver
Memory Corruption when updating prepared commands with invalid port indices based on user space input exceeds supported read client limits.