Qualcomm Qcm4490 vulnerabilities, page 5
263 vulnerabilities
Known vulnerabilities in Qualcomm Qcm4490, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2024-38408qualcomm, inc.snapdragon+229
EPSS score0.14%
Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions.CVE-2024-45557qualcomm, inc.snapdragon+60EPSS score0.11%
Memory corruption can occur when TME processes addresses from TZ and MPSS requests without proper validation.CVE-2024-45549qualcomm, inc.snapdragon+158EPSS score0.12%
Information disclosure while creating MQ channels.CVE-2024-45551qualcomm, inc.snapdragon+240EPSS score0.11%
Cryptographic issue occurs during PIN/password verification using Gatekeeper, where RPMB writes can be dropped on verification failure, potentially leading to a user throttling bypass.CVE-2024-45553qualcomm, inc.snapdragon+125EPSS score0.13%
Memory corruption can occur when process-specific maps are added to the global list. If a map is removed from the global list while another thread is using it for a process-specific task, issues may arise.CVE-2024-49834qualcomm, inc.snapdragon+122EPSS score0.11%
Memory corruption while power-up or power-down sequence of the camera sensor.CVE-2024-49848qualcomm, inc.snapdragon+145EPSS score0.14%
Memory corruption while processing multiple IOCTL calls from HLOS to DSP.CVE-2024-49838qualcomm, inc.snapdragon+165EPSS score0.31%
Information disclosure while parsing the OCI IE with invalid length.CVE-2024-49833qualcomm, inc.snapdragon+78EPSS score0.10%
Memory corruption can occur in the camera when an invalid CID is used.CVE-2024-33011qualcomm, inc.snapdragon+247EPSS score0.28%
Transient DOS while parsing the MBSSID IE from the beacons, when the MBSSID IE length is zero.CVE-2024-33035qualcomm, inc.snapdragon+89EPSS score0.13%
Memory corruption while calculating total metadata size when a very high reserved size is requested by gralloc clients.CVE-2024-33051qualcomm, inc.snapdragon+282EPSS score0.30%
Transient DOS while processing TIM IE from beacon frame as there is no check for IE length.CVE-2024-33045qualcomm, inc.snapdragon+175EPSS score0.12%
Memory corruption when BTFM client sends new messages over Slimbus to ADSP.CVE-2024-33050qualcomm, inc.snapdragon+252EPSS score0.30%
Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing or improper.CVE-2024-33034qualcomm, inc.snapdragon+102EPSS score0.10%
Memory corruption can occur if VBOs hold outdated or invalid GPU SMMU mappings, especially when the binding and reclaiming of memory buffers are performed at the same time.CVE-2024-33012qualcomm, inc.snapdragon+247EPSS score0.28%
Transient DOS while parsing the multiple MBSSID IEs from the beacon, when the tag length is non-zero value but with end of beacon.CVE-2024-33060qualcomm, inc.snapdragon+243EPSS score0.17%
Memory corruption when two threads try to map and unmap a single node simultaneously.CVE-2024-33043qualcomm, inc.snapdragon+197EPSS score0.09%
Transient DOS while handling PS event when Program Service name length offset value is set to 255.CVE-2024-33010qualcomm, inc.snapdragon+246EPSS score0.28%
Transient DOS while parsing fragments of MBSSID IE from beacon frame.CVE-2024-33042qualcomm, inc.snapdragon+196EPSS score0.13%
Memory corruption when Alternative Frequency offset value is set to 255.