qcs2290_firmware vulnerabilities
CVEs whose affected-version data names the qcs2290_firmware package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
10 CVEsRSS
CVE-2026-25267High· 7.8Memory corruption when non-secure loader rewrites page tables before secure memory initialization.
Memory corruption when non-secure loader rewrites page tables before secure memory initialization.
CVE-2026-25263Medium· 6.6Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters.
Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters.
CVE-2025-47407High· 7.8Memory corruption while creating a process on the digital signal processor due to allocation failure at the kernel level.
Memory corruption while creating a process on the digital signal processor due to allocation failure at the kernel level.
CVE-2025-47404Medium· 6.5Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified.
Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified.
CVE-2025-47392High· 8.8Memory corruption when decoding corrupted satellite data files with invalid signature offsets.
Memory corruption when decoding corrupted satellite data files with invalid signature offsets.
CVE-2025-47369Medium· 5.5Information disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a session ID.
Information disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a session ID.
CVE-2025-47348High· 7.8Memory corruption while processing identity credential operations in the trusted application.
Memory corruption while processing identity credential operations in the trusted application.
CVE-2025-47334Medium· 6.7Memory corruption while processing shared command buffer packet between camera userspace and kernel.
Memory corruption while processing shared command buffer packet between camera userspace and kernel.
CVE-2025-47330Medium· 5.5Transient DOS while parsing video packets received from the video firmware.
Transient DOS while parsing video packets received from the video firmware.
CVE-2025-47323High· 7.8Memory corruption while routing GPR packets between user and root when handling large data packet.
Memory corruption while routing GPR packets between user and root when handling large data packet.