Qcs4290 Firmware

CVEs (481)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2024-53026	Qualcomm VoLTE/VoWiFi IMS call	Hig	0.53	8.2	0.00	Jun 3, 2025	Information disclosure when an invalid RTCP packet is received during a VoLTE/VoWiFi IMS call.
CVE-2024-53021	Qualcomm Fastconnect 6900 Firmware	Hig	0.53	8.2	0.00	Jun 3, 2025	Information disclosure may occur while processing goodbye RTCP packet from network.
CVE-2024-53020	Qualcomm RTP	Hig	0.53	8.2	0.00	Jun 3, 2025	Information disclosure may occur while decoding the RTP packet with invalid header extension from network.
CVE-2023-28585	Qualcomm TEE Kernel	Hig	0.53	8.2	0.00	Dec 5, 2023	Memory corruption while loading an ELF segment in TEE Kernel.
CVE-2023-28545	Qualcomm TZ Secure OS	Hig	0.53	8.2	0.00	Nov 7, 2023	Memory corruption in TZ Secure OS while loading an app ELF.
CVE-2023-24849	Qualcomm Data Modem	Hig	0.53	8.2	0.00	Oct 3, 2023	Information Disclosure in data Modem while parsing an FMTP line in an SDP message.
CVE-2023-24848	Qualcomm Data Modem	Hig	0.53	8.2	0.00	Oct 3, 2023	Information Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line value.
CVE-2023-22385	Qualcomm Data Modem	Hig	0.53	8.2	0.00	Oct 3, 2023	Memory Corruption in Data Modem while making a MO call or MT VOLTE call.
CVE-2023-21669	Qualcomm WLAN Host	Hig	0.53	8.2	0.00	Jun 6, 2023	Information Disclosure in WLAN HOST while sending DPP action frame to peer with an invalid source address.
CVE-2022-40503	Qualcomm Bluetooth HOST	Hig	0.53	8.2	0.00	Apr 13, 2023	Information disclosure due to buffer over-read in Bluetooth Host while A2DP streaming.
CVE-2022-33235	Qualcomm WLAN Firmware	Hig	0.53	8.2	0.00	Dec 13, 2022	Information disclosure due to buffer over-read in WLAN firmware while parsing security context info attributes. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…
CVE-2022-25706	Qualcomm Snapdragon	Hig	0.53	8.2	0.00	Sep 16, 2022	Information disclosure in Bluetooth driver due to buffer over-read while reading l2cap length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
CVE-2022-22062	Qualcomm Snapdragon	Hig	0.53	8.2	0.00	Sep 2, 2022	An out-of-bounds read can occur while parsing a server certificate due to improper length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT,…
CVE-2021-35083	Qualcomm Snapdragon	Hig	0.53	8.2	0.01	Jun 14, 2022	Possible out of bound read due to improper validation of certificate chain in SSL or Internet key exchange in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…
CVE-2021-30349	Qualcomm Snapdragon	Hig	0.53	8.2	0.00	Jun 14, 2022	Improper access control sequence for AC database after memory allocation can lead to possible memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables,…
CVE-2021-35117	Qualcomm Snapdragon Compute	Hig	0.53	8.2	0.01	Apr 1, 2022	An Out of Bounds read may potentially occur while processing an IBSS beacon, in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music
CVE-2021-35088	Qualcomm Snapdragon	Hig	0.53	8.2	0.01	Apr 1, 2022	Possible out of bound read due to improper validation of IE length during SSID IE parse when channel is DFS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon…
CVE-2020-11285	Qualcomm Snapdragon	Hig	0.53	8.2	0.01	May 7, 2021	Buffer over-read while unpacking the RTCP packet we may read extra byte if wrong length is provided in RTCP packets in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon…
CVE-2020-11251	Qualcomm Snapdragon	Hig	0.53	8.2	0.01	Apr 7, 2021	Out-of-bounds read vulnerability while accessing DTMF payload due to lack of check of buffer length before copying in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon…
CVE-2020-11247	Qualcomm Snapdragon	Hig	0.53	8.2	0.01	Apr 7, 2021	Out of bound memory read while unpacking data due to lack of offset length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CVE-2024-53026HigJun 3, 2025
Qualcomm
VoLTE/VoWiFi IMS call
risk 0.53cvss 8.2epss 0.00
Information disclosure when an invalid RTCP packet is received during a VoLTE/VoWiFi IMS call.
CVE-2024-53021HigJun 3, 2025
Qualcomm
Fastconnect 6900 Firmware
risk 0.53cvss 8.2epss 0.00
Information disclosure may occur while processing goodbye RTCP packet from network.
CVE-2024-53020HigJun 3, 2025
Qualcomm
RTP
risk 0.53cvss 8.2epss 0.00
Information disclosure may occur while decoding the RTP packet with invalid header extension from network.
CVE-2023-28585HigDec 5, 2023
Qualcomm
TEE Kernel
risk 0.53cvss 8.2epss 0.00
Memory corruption while loading an ELF segment in TEE Kernel.
CVE-2023-28545HigNov 7, 2023
Qualcomm
TZ Secure OS
risk 0.53cvss 8.2epss 0.00
Memory corruption in TZ Secure OS while loading an app ELF.
CVE-2023-24849HigOct 3, 2023
Qualcomm
Data Modem
risk 0.53cvss 8.2epss 0.00
Information Disclosure in data Modem while parsing an FMTP line in an SDP message.
CVE-2023-24848HigOct 3, 2023
Qualcomm
Data Modem
risk 0.53cvss 8.2epss 0.00
Information Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line value.
CVE-2023-22385HigOct 3, 2023
Qualcomm
Data Modem
risk 0.53cvss 8.2epss 0.00
Memory Corruption in Data Modem while making a MO call or MT VOLTE call.
CVE-2023-21669HigJun 6, 2023
Qualcomm
WLAN Host
risk 0.53cvss 8.2epss 0.00
Information Disclosure in WLAN HOST while sending DPP action frame to peer with an invalid source address.
CVE-2022-40503HigApr 13, 2023
Qualcomm
Bluetooth HOST
risk 0.53cvss 8.2epss 0.00
Information disclosure due to buffer over-read in Bluetooth Host while A2DP streaming.
CVE-2022-33235HigDec 13, 2022
Qualcomm
WLAN Firmware
risk 0.53cvss 8.2epss 0.00
Information disclosure due to buffer over-read in WLAN firmware while parsing security context info attributes. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…
CVE-2022-25706HigSep 16, 2022
Qualcomm
Snapdragon
risk 0.53cvss 8.2epss 0.00
Information disclosure in Bluetooth driver due to buffer over-read while reading l2cap length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
CVE-2022-22062HigSep 2, 2022
Qualcomm
Snapdragon
risk 0.53cvss 8.2epss 0.00
An out-of-bounds read can occur while parsing a server certificate due to improper length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT,…
CVE-2021-35083HigJun 14, 2022
Qualcomm
Snapdragon
risk 0.53cvss 8.2epss 0.01
Possible out of bound read due to improper validation of certificate chain in SSL or Internet key exchange in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…
CVE-2021-30349HigJun 14, 2022
Qualcomm
Snapdragon
risk 0.53cvss 8.2epss 0.00
Improper access control sequence for AC database after memory allocation can lead to possible memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables,…
CVE-2021-35117HigApr 1, 2022
Qualcomm
Snapdragon Compute
risk 0.53cvss 8.2epss 0.01
An Out of Bounds read may potentially occur while processing an IBSS beacon, in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music
CVE-2021-35088HigApr 1, 2022
Qualcomm
Snapdragon
risk 0.53cvss 8.2epss 0.01
Possible out of bound read due to improper validation of IE length during SSID IE parse when channel is DFS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon…
CVE-2020-11285HigMay 7, 2021
Qualcomm
Snapdragon
risk 0.53cvss 8.2epss 0.01
Buffer over-read while unpacking the RTCP packet we may read extra byte if wrong length is provided in RTCP packets in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon…
CVE-2020-11251HigApr 7, 2021
Qualcomm
Snapdragon
risk 0.53cvss 8.2epss 0.01
Out-of-bounds read vulnerability while accessing DTMF payload due to lack of check of buffer length before copying in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon…
CVE-2020-11247HigApr 7, 2021
Qualcomm
Snapdragon
risk 0.53cvss 8.2epss 0.01
Out of bound memory read while unpacking data due to lack of offset length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Page 9 of 25