Qualcomm Qcs4490 Firmware vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Qualcomm Qcs4490 Firmware: 53 record(s), with affected versions and fixes.cpe:2.3:o:qualcomm:qcs4490_firmware
CVE-2026-21367
High · 7.5
CWE-126 Apr 6, 2026
Buffer Over-read in WLAN Firmware
Transient DOS when processing nonstandard FILS Discovery Frames with out-of-range action sizes during initial scans.
CVE-2025-47392
High · 8.8
CWE-190 Apr 6, 2026
Integer Overflow or Wraparound in GPS
Memory corruption when decoding corrupted satellite data files with invalid signature offsets.
CVE-2025-47391
High · 7.8
CWE-121 Apr 6, 2026
Stack-based Buffer Overflow in Camera Driver
Memory corruption while processing a frame request from user.
CVE-2026-21385
High · 7.8
KEV High · 57 Public exploit CWE-190 Mar 2, 2026
Qualcomm Multiple Chipsets Memory Corruption Vulnerability
Memory corruption while using alignments for memory allocation.
CVE-2025-59600
High · 7.8
CWE-126 Mar 2, 2026
Buffer Over-read in Graphics
Memory Corruption when adding user-supplied data without checking available buffer space.
CVE-2025-47383
High · 7.2
CWE-325 Mar 2, 2026
Missing Cryptographic Step in Data Modem
Weak configuration may lead to cryptographic issue when a VoWiFi call is triggered from UE.
CVE-2025-47373
High · 7.8
CWE-787 Mar 2, 2026
Out-of-bounds Write in Automotive
Memory Corruption when accessing buffers with invalid length during TA invocation.
CVE-2025-47371
Medium · 6.5
CWE-617 Mar 2, 2026
Reachable Assertion in Modem
Transient DOS when an LTE RLC packet with invalid TB is received by UE.
CVE-2025-47398
High · 7.8
CWE-416 Feb 2, 2026
Use After Free in Graphics
Memory Corruption while deallocating graphics processing unit memory buffers due to improper handling of memory pointers.
CVE-2025-47397
High · 7.8
CWE-401 Feb 2, 2026
Improper Release of Memory Before Removing Last Reference in Graphics
Memory Corruption when initiating GPU memory mapping using scatter-gather lists due to unchecked IOMMU mapping errors.
CVE-2025-47366
High · 7.8
CWE-749 Feb 2, 2026
Exposed Dangerous Method or Function in HLOS
Cryptographic issue when a Trusted Zone with outdated code is triggered by a HLOS providing incorrect input.
CVE-2025-47369
Medium · 5.5
CWE-200 Jan 7, 2026
Information Exposure in Computer Vision
Information disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a session ID.
CVE-2025-47348
High · 7.8
CWE-457 Jan 7, 2026
Use of Uninitialized Variable in HLOS
Memory corruption while processing identity credential operations in the trusted application.
CVE-2025-47344
Medium · 6.4
CWE-367 Jan 7, 2026
Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver
Memory corruption while handling sensor utility operations.
CVE-2025-47334
Medium · 6.7
CWE-120 Jan 7, 2026
Buffer Copy Without Checking Size of Input in Camera Driver
Memory corruption while processing shared command buffer packet between camera userspace and kernel.
CVE-2025-47333
Medium · 6.6
CWE-416 Jan 7, 2026
Use After Free in HLOS
Memory corruption while handling buffer mapping operations in the cryptographic driver.
CVE-2025-47332
Medium · 6.4
CWE-367 Jan 7, 2026
Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver
Memory corruption while processing a config call from userspace.
CVE-2025-47331
Medium · 6.1
CWE-126 Jan 7, 2026
Buffer Over-read in Video
Information disclosure while processing a firmware event.
CVE-2025-47330
Medium · 5.5
CWE-126 Jan 7, 2026
Buffer Over-read in Video
Transient DOS while parsing video packets received from the video firmware.
CVE-2025-47323
High · 7.8
CWE-190 Dec 18, 2025
Integer Overflow or Wraparound in Audio
Memory corruption while routing GPR packets between user and root when handling large data packet.
CVE-2025-47370
Medium · 6.5
CWE-617 Nov 4, 2025
Reachable Assertion in BT Controller
Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan.
CVE-2025-27054
High · 7.8
CWE-787 Oct 9, 2025
Out-of-bounds Write in Display
Memory corruption while processing a malformed license file during reboot.
CVE-2025-27053
High · 7.8
CWE-131 Oct 9, 2025
Incorrect Calculation of Buffer Size in HLOS
Memory corruption during PlayReady APP usecase while processing TA commands.
CVE-2025-21479
High · 8.6
KEV High · 56 Public exploit CWE-863 Jun 3, 2025
Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability
Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.
CVE-2025-21480
High · 8.6
KEV High · 47 CWE-863 Jun 3, 2025
Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability
Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.