qcs6490_firmware vulnerabilities
CVEs whose affected-version data names the qcs6490_firmware package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
15 CVEsRSS
CVE-2025-47369Medium· 5.5Information disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a session ID.
Information disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a session ID.
CVE-2025-47348High· 7.8Memory corruption while processing identity credential operations in the trusted application.
Memory corruption while processing identity credential operations in the trusted application.
CVE-2025-47346High· 7.8Memory corruption while processing a secure logging command in the trusted application.
Memory corruption while processing a secure logging command in the trusted application.
CVE-2025-47345High· 8.4Cryptographic issue may occur while encrypting license data.
Cryptographic issue may occur while encrypting license data.
CVE-2025-47344Medium· 6.7Memory corruption while handling sensor utility operations.
Memory corruption while handling sensor utility operations.
CVE-2025-47337Medium· 6.7Memory corruption while accessing a synchronization object during concurrent operations.
Memory corruption while accessing a synchronization object during concurrent operations.
CVE-2025-47335Medium· 6.7Memory corruption while parsing clock configuration data for a specific hardware type.
Memory corruption while parsing clock configuration data for a specific hardware type.
CVE-2025-47330Medium· 5.5Transient DOS while parsing video packets received from the video firmware.
Transient DOS while parsing video packets received from the video firmware.
CVE-2025-47323High· 7.8Memory corruption while routing GPR packets between user and root when handling large data packet.
Memory corruption while routing GPR packets between user and root when handling large data packet.
CVE-2025-47341High· 7.8memory corruption while processing an image encoding completion event.
memory corruption while processing an image encoding completion event.
CVE-2025-27049Medium· 5.5Transient DOS while processing IOCTL call for image encoding.
Transient DOS while processing IOCTL call for image encoding.
CVE-2025-27041Medium· 5.5Transient DOS while processing video packets received from video firmware.
Transient DOS while processing video packets received from video firmware.
CVE-2025-27036Medium· 6.1Information disclosure when Video engine escape input data is less than expected minimum size.
Information disclosure when Video engine escape input data is less than expected minimum size.
CVE-2025-27033Medium· 6.1Information disclosure while running video usecase having rogue firmware.
Information disclosure while running video usecase having rogue firmware.
CVE-2025-21484High· 8.2Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet.
Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet.