Vulnerabilidades do Qualcomm Qcs4290 Firmware
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Qualcomm Qcs4290 Firmware: 47 registro(s), com versões afetadas e correções.cpe:2.3:o:qualcomm:qcs4290_firmware
CVE-2025-47392
Alta · 8.8
CWE-190 06/04/2026
Integer Overflow or Wraparound in GPS
Memory corruption when decoding corrupted satellite data files with invalid signature offsets.
CVE-2026-21385
Alta · 7.8
KEV Alta · 58 Exploit público CWE-190 02/03/2026
Qualcomm Multiple Chipsets Memory Corruption Vulnerability
Memory corruption while using alignments for memory allocation.
CVE-2025-59600
Alta · 7.8
CWE-126 02/03/2026
Buffer Over-read in Graphics
Memory Corruption when adding user-supplied data without checking available buffer space.
CVE-2025-47386
Alta · 7.8
CWE-416 02/03/2026
Use After Free in Automotive Audio
Memory Corruption while invoking IOCTL calls when concurrent access to shared buffer occurs.
CVE-2025-47383
Alta · 7.2
CWE-325 02/03/2026
Missing Cryptographic Step in Data Modem
Weak configuration may lead to cryptographic issue when a VoWiFi call is triggered from UE.
CVE-2025-47379
Alta · 7.8
CWE-416 02/03/2026
Use After Free in Automotive Audio
Memory Corruption when concurrent access to shared buffer occurs due to improper synchronization between assignment and deallocation of buffer resources.
CVE-2025-47377
Alta · 7.8
CWE-416 02/03/2026
Use After Free in Automotive Audio
Memory Corruption when accessing a buffer after it has been freed while processing IOCTL calls.
CVE-2025-47376
Alta · 7.8
CWE-416 02/03/2026
Use After Free in Automotive Audio
Memory Corruption when concurrent access to shared buffer occurs during IOCTL calls.
CVE-2025-47375
Alta · 7.8
CWE-416 02/03/2026
Use After Free in Automotive Audio
Memory corruption while handling different IOCTL calls from the user-space simultaneously.
CVE-2025-47373
Alta · 7.8
CWE-787 02/03/2026
Out-of-bounds Write in Automotive
Memory Corruption when accessing buffers with invalid length during TA invocation.
CVE-2025-47371
Média · 6.5
CWE-617 02/03/2026
Reachable Assertion in Modem
Transient DOS when an LTE RLC packet with invalid TB is received by UE.
CVE-2025-47398
Alta · 7.8
CWE-416 02/02/2026
Use After Free in Graphics
Memory Corruption while deallocating graphics processing unit memory buffers due to improper handling of memory pointers.
CVE-2025-47397
Alta · 7.8
CWE-401 02/02/2026
Improper Release of Memory Before Removing Last Reference in Graphics
Memory Corruption when initiating GPU memory mapping using scatter-gather lists due to unchecked IOMMU mapping errors.
CVE-2025-27054
Alta · 7.8
CWE-787 09/10/2025
Out-of-bounds Write in Display
Memory corruption while processing a malformed license file during reboot.
CVE-2025-27053
Alta · 7.8
CWE-131 09/10/2025
Incorrect Calculation of Buffer Size in HLOS
Memory corruption during PlayReady APP usecase while processing TA commands.
CVE-2023-33106
Alta · 7.8
KEV Alta · 49 CWE-119 05/12/2023
Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability
Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.
CVE-2023-33107
Alta · 7.8
KEV Alta · 55 Exploit público CWE-190 05/12/2023
Qualcomm Multiple Chipsets Integer Overflow Vulnerability
Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.
CVE-2023-33063
Alta · 7.8
KEV Alta · 49 CWE-416 05/12/2023
Qualcomm Multiple Chipsets Use-After-Free Vulnerability
Memory corruption in DSP Services during a remote call from HLOS to DSP.
CVE-2022-22071
Alta · 7.8
KEV Alta · 46 CWE-416 14/06/2022
Qualcomm Multiple Chipsets Use-After-Free Vulnerability
Possible use after free when process shell memory is freed using IOCTL munmap call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music
CVE-2020-11261
Alta · 7.8
KEV Alta · 52 CWE-787 09/06/2021
Qualcomm Multiple Chipsets Improper Input Validation Vulnerability
Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2021-1905
Alta · 7.8
KEV Alta · 58 Exploit público CWE-416 07/05/2021
Qualcomm Multiple Chipsets Use-After-Free Vulnerability
Possible use after free due to improper handling of memory mapping of multiple processes simultaneously. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2021-1906
Média · 5.5
KEV 07/05/2021
Qualcomm Multiple Chipsets Detection of Error Condition Without Action Vulnerability
Improper handling of address deregistration on failure can lead to new GPU address allocation failure. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables