Qualcomm Qcs4490 Firmware

259 CVEs affecting Qualcomm Qcs4490 Firmware. Latest disclosed: 2026-08-04. Critical: 16, High: 202.

Top CVEs affecting Qualcomm Qcs4490 Firmware
CVESeverityScorePublishedSummary
CVE-2025-27034Critical9.82025-09-24Memory corruption while selecting the PLMN from SOR failed list.
CVE-2025-21483Critical9.82025-09-24Memory corruption when the UE receives an RTP packet from the network, during the reassembly of NALUs.
CVE-2023-28582Critical9.82024-03-04Memory corruption in Data Modem while verifying hello-verify message during the DTLS handshake.
CVE-2023-33025Critical9.82024-01-02Memory corruption in Data Modem when a non-standard SDP body, during a VOLTE call.
CVE-2023-22388Critical9.82023-11-07Memory Corruption in Multi-mode Call Processor while processing bit mask API.
CVE-2023-33028Critical9.82023-10-03Memory corruption in WLAN Firmware while doing a memory copy of pmk cache.
CVE-2023-24855Critical9.82023-10-03Memory corruption in Modem while processing security related configuration before AS Security Exchange.
CVE-2023-43556Critical9.32024-06-03Memory corruption in Hypervisor when platform information mentioned is not aligned.
CVE-2023-28578Critical9.32024-03-04Memory corruption in Core Services while executing the command for removing a single event listener.
CVE-2023-33072Critical9.32024-02-06Memory corruption in Core while processing control functions.
CVE-2023-33030Critical9.32024-01-02Memory corruption in HLOS while running playready use-case.
CVE-2025-21450Critical9.12025-07-08Cryptographic issue occurs due to use of insecure connection method while downloading.
CVE-2023-43551Critical9.12024-06-03Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode C…
CVE-2023-33054Critical9.12023-12-05Cryptographic issue in GPS HLOS Driver while downloading Qualcomm GNSS assistance data.
CVE-2023-28540Critical9.12023-10-03Cryptographic issue in Data Modem due to improper authentication during TLS handshake.
CVE-2023-28574Critical9.02023-11-07Memory corruption in core services when Diag handler receives a command to configure event listeners.
CVE-2025-47392High8.82026-04-06Memory corruption when decoding corrupted satellite data files with invalid signature offsets.
CVE-2023-21673High8.72023-10-03Improper Access to the VM resource manager can lead to Memory Corruption.
CVE-2025-21479High8.62025-06-03Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.
CVE-2025-21480High8.62025-06-03Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.