qcm6490_firmware vulnerabilities
CVEs whose affected-version data names the qcm6490_firmware package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
41 CVEsRSS
CVE-2025-47331Medium· 6.1Information disclosure while processing a firmware event.
Information disclosure while processing a firmware event.
CVE-2025-47330Medium· 5.5Transient DOS while parsing video packets received from the video firmware.
Transient DOS while parsing video packets received from the video firmware.
CVE-2025-47323High· 7.8Memory corruption while routing GPR packets between user and root when handling large data packet.
Memory corruption while routing GPR packets between user and root when handling large data packet.
CVE-2025-47341High· 7.8memory corruption while processing an image encoding completion event.
memory corruption while processing an image encoding completion event.
CVE-2025-27049Medium· 5.5Transient DOS while processing IOCTL call for image encoding.
Transient DOS while processing IOCTL call for image encoding.
CVE-2025-27041Medium· 5.5Transient DOS while processing video packets received from video firmware.
Transient DOS while processing video packets received from video firmware.
CVE-2025-27036Medium· 6.1Information disclosure when Video engine escape input data is less than expected minimum size.
Information disclosure when Video engine escape input data is less than expected minimum size.
CVE-2025-27033Medium· 6.1Information disclosure while running video usecase having rogue firmware.
Information disclosure while running video usecase having rogue firmware.
CVE-2025-21487High· 8.2Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length.
Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length.
CVE-2025-21484High· 8.2Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet.
Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet.
CVE-2024-23384High· 8.4Memory corruption when the mapped pages in VBO are still mapped after reclaiming by shrinker.
Memory corruption when the mapped pages in VBO are still mapped after reclaiming by shrinker.