qcm4490_firmware vulnerabilities
CVEs whose affected-version data names the qcm4490_firmware package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
18 CVEsRSS
CVE-2026-57545High· 7.8Memory corruption when processing draw objects of incorrect type during graphics command list execution.
Memory corruption when processing draw objects of incorrect type during graphics command list execution.
CVE-2026-25272Medium· 6.7Memory Corruption when processing camera CRE driver operations with improper handling of buffer limits during hardware update preparation.
Memory Corruption when processing camera CRE driver operations with improper handling of buffer limits during hardware update preparation.
CVE-2026-25269Medium· 6.7Memory corruption when processing camera requests with excessive batch and IO buffer configurations exceeds allocated memory size.
Memory corruption when processing camera requests with excessive batch and IO buffer configurations exceeds allocated memory size.
CVE-2026-25267High· 7.8Memory corruption when non-secure loader rewrites page tables before secure memory initialization.
Memory corruption when non-secure loader rewrites page tables before secure memory initialization.
CVE-2026-25263Medium· 6.6Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters.
Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters.
CVE-2025-47403Medium· 6.5Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming.
Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming.
CVE-2025-47392High· 8.8Memory corruption when decoding corrupted satellite data files with invalid signature offsets.
Memory corruption when decoding corrupted satellite data files with invalid signature offsets.
CVE-2025-47391High· 7.8Memory corruption while processing a frame request from user.
Memory corruption while processing a frame request from user.
CVE-2025-47369Medium· 5.5Information disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a session ID.
Information disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a session ID.
CVE-2025-47344Medium· 6.7Memory corruption while handling sensor utility operations.
Memory corruption while handling sensor utility operations.
CVE-2025-47334Medium· 6.7Memory corruption while processing shared command buffer packet between camera userspace and kernel.
Memory corruption while processing shared command buffer packet between camera userspace and kernel.
CVE-2025-47332Medium· 6.7Memory corruption while processing a config call from userspace.
Memory corruption while processing a config call from userspace.
CVE-2025-47331Medium· 6.1Information disclosure while processing a firmware event.
Information disclosure while processing a firmware event.
CVE-2025-47330Medium· 5.5Transient DOS while parsing video packets received from the video firmware.
Transient DOS while parsing video packets received from the video firmware.
CVE-2025-47323High· 7.8Memory corruption while routing GPR packets between user and root when handling large data packet.
Memory corruption while routing GPR packets between user and root when handling large data packet.
CVE-2025-21488High· 8.2Information disclosure while decoding this RTP packet headers received by UE from the network when the padding bit is set.
Information disclosure while decoding this RTP packet headers received by UE from the network when the padding bit is set.
CVE-2025-21487High· 8.2Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length.
Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length.
CVE-2025-21484High· 8.2Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet.
Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet.