← Back

Qcm6490 Firmware

qcm6490_firmware

Vendor: Qualcomm • 586 CVEs

CVEs (586)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-35118
1Qualcomm
100Apq8053 Firmware
Aqt1000 FirmwareAr8031 Firmware+97 more
Nov 21, 2024
Jun 14, 2022
N/A· v4
6.7 MEDIUM· v3
4.6 MEDIUM· v2
An out-of-bounds write can occur due to an incorrect input check in the camera driver in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile...Show more
An out-of-bounds write can occur due to an incorrect input check in the camera driver in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesShow less
CVE-2021-35116
1Qualcomm
113Apq8009 Firmware
Apq8009w FirmwareApq8096au Firmware+110 more
Nov 21, 2024
Jun 14, 2022
N/A· v4
7.1 HIGH· v3
6.6 MEDIUM· v2
APK can load a crafted model into the CDSP which can lead to a compromise of CDSP and other APK`s data executing there in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon...Show more
APK can load a crafted model into the CDSP which can lead to a compromise of CDSP and other APK`s data executing there in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon WearablesShow less
CVE-2021-35112
1Qualcomm
107Apq8009w Firmware
Aqt1000 FirmwareAr8031 Firmware+104 more
Nov 21, 2024
Jun 14, 2022
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
A user with user level permission can access graphics protected region due to improper access control in register configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Sn...Show more
A user with user level permission can access graphics protected region due to improper access control in register configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesShow less
CVE-2021-35104
1Qualcomm
176Apq8009w Firmware
Apq8017 FirmwareApq8064au Firmware+173 more
Nov 21, 2024
Jun 14, 2022
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
Possible buffer overflow due to improper parsing of headers while playing the FLAC audio clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdrago...Show more
Possible buffer overflow due to improper parsing of headers while playing the FLAC audio clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingShow less
CVE-2021-35100
1Qualcomm
120Apq8009w Firmware
Apq8017 FirmwareApq8064au Firmware+117 more
Nov 21, 2024
Jun 14, 2022
N/A· v4
7.5 HIGH· v3
7.8 HIGH· v2
Possible buffer over read due to improper calculation of string length while parsing Id3 tag in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon...Show more
Possible buffer over read due to improper calculation of string length while parsing Id3 tag in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesShow less
CVE-2021-35096
1Qualcomm
56Ar8035 Firmware
Qca6390 FirmwareQca6391 Firmware+53 more
Nov 21, 2024
Jun 14, 2022
N/A· v4
7.5 HIGH· v3
7.8 HIGH· v2
Improper memory allocation during counter check DLM handling can lead to denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2021-35094
1Qualcomm
81Aqt1000 Firmware
Qca6390 FirmwareQca6391 Firmware+78 more
Nov 21, 2024
Jun 14, 2022
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
Improper verification of timeout-based authentication in identity credential can lead to invalid authorization in HLOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdrago...Show more
Improper verification of timeout-based authentication in identity credential can lead to invalid authorization in HLOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon MobileShow less
CVE-2021-35090
1Qualcomm
56Aqt1000 Firmware
Qca6390 FirmwareQca6391 Firmware+53 more
Nov 21, 2024
Jun 14, 2022
N/A· v4
7.8 HIGH· v3
6.9 MEDIUM· v2
Possible hypervisor memory corruption due to TOC TOU race condition when updating address mappings in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2021-35087
1Qualcomm
41Ar8035 Firmware
Qca6390 FirmwareQca6391 Firmware+38 more
Nov 21, 2024
Jun 14, 2022
N/A· v4
7.5 HIGH· v3
7.8 HIGH· v2
Possible null pointer access due to improper validation of system information message to be processed in Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2021-35086
1Qualcomm
55Ar8035 Firmware
Qca6390 FirmwareQca6391 Firmware+52 more
Nov 21, 2024
Jun 14, 2022
N/A· v4
7.5 HIGH· v3
7.8 HIGH· v2
Possible buffer over read due to improper validation of SIB type when processing a NR system Information message in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobi...Show more
Possible buffer over read due to improper validation of SIB type when processing a NR system Information message in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon MobileShow less
CVE-2021-35081
1Qualcomm
73Aqt1000 Firmware
Ar8035 FirmwareQca6390 Firmware+70 more
Nov 21, 2024
Jun 14, 2022
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
Possible buffer overflow due to improper validation of SSID length received from beacon or probe response during an IBSS session in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electr...Show more
Possible buffer overflow due to improper validation of SSID length received from beacon or probe response during an IBSS session in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & MusicShow less
CVE-2021-35078
1Qualcomm
107Aqt1000 Firmware
Ar8035 FirmwareCsrb31024 Firmware+104 more
Nov 21, 2024
Jun 14, 2022
N/A· v4
7.5 HIGH· v3
7.8 HIGH· v2
Possible memory leak due to improper validation of certificate chain length while parsing server certificate chain in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Indu...Show more
Possible memory leak due to improper validation of certificate chain length while parsing server certificate chain in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon WearablesShow less
CVE-2021-35076
1Qualcomm
57Ar8035 Firmware
Qca6390 FirmwareQca6391 Firmware+54 more
Nov 21, 2024
Jun 14, 2022
N/A· v4
7.5 HIGH· v3
7.8 HIGH· v2
Possible null pointer dereference due to improper validation of RRC connection reconfiguration message in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2021-35073
1Qualcomm
56Ar8035 Firmware
Qca6390 FirmwareQca6391 Firmware+53 more
Nov 21, 2024
Jun 14, 2022
N/A· v4
7.5 HIGH· v3
7.8 HIGH· v2
Possible assertion due to improper validation of rank restriction field in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2021-35071
1Qualcomm
171Aqt1000 Firmware
Ar8035 FirmwareAr9380 Firmware+168 more
Nov 21, 2024
Jun 14, 2022
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
Possible buffer over read due to lack of size validation while copying data from DBR buffer to RX buffer and can lead to Denial of Service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Indus...Show more
Possible buffer over read due to lack of size validation while copying data from DBR buffer to RX buffer and can lead to Denial of Service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingShow less
CVE-2021-30350
1Qualcomm
96Aqt1000 Firmware
Ar8035 FirmwareCsrb31024 Firmware+93 more
Nov 21, 2024
Jun 14, 2022
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
Lack of MBN header size verification against input buffer can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wear...Show more
Lack of MBN header size verification against input buffer can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon WearablesShow less
CVE-2021-30349
1Qualcomm
141Aqt1000 Firmware
Ar8031 FirmwareAr8035 Firmware+138 more
Nov 21, 2024
Jun 14, 2022
N/A· v4
6.7 MEDIUM· v3
7.2 HIGH· v2
Improper access control sequence for AC database after memory allocation can lead to possible memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industr...Show more
Improper access control sequence for AC database after memory allocation can lead to possible memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingShow less
CVE-2021-30347
1Qualcomm
64Ar8035 Firmware
Qca6390 FirmwareQca6391 Firmware+61 more
Nov 21, 2024
Jun 14, 2022
N/A· v4
8.1 HIGH· v3
9.3 HIGH· v2
Improper integrity check can lead to race condition between tasks PDCP and RRC? right after a valid RRC Command packet has been received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industr...Show more
Improper integrity check can lead to race condition between tasks PDCP and RRC? right after a valid RRC Command packet has been received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon MobileShow less
CVE-2021-30344
1Qualcomm
147Apq8009w Firmware
Apq8017 FirmwareApq8053 Firmware+144 more
Nov 21, 2024
Jun 14, 2022
N/A· v4
7.5 HIGH· v3
7.8 HIGH· v2
Improper authorization of a replayed LTE security mode command can lead to a denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdrag...Show more
Improper authorization of a replayed LTE security mode command can lead to a denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesShow less
CVE-2021-30343
1Qualcomm
64Ar8035 Firmware
Qca6390 FirmwareQca6391 Firmware+61 more
Nov 21, 2024
Jun 14, 2022
N/A· v4
5.9 MEDIUM· v3
7.1 HIGH· v2
Improper integrity check can lead to race condition between tasks PDCP and RRC? after a valid RRC Command packet has been received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IO...Show more
Improper integrity check can lead to race condition between tasks PDCP and RRC? after a valid RRC Command packet has been received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon MobileShow less