Qualcomm QCS6490 Firmware vulnerabilities

562 CVEs affecting Qualcomm QCS6490 Firmware, 5 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-47366, published 2026-02-02.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-33106: Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability, published 2023-12-05. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2023-12-05. EPSS: 0.8% chance of exploitation in the next 30 days. Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.
CVE-2023-33107: Qualcomm Multiple Chipsets Integer Overflow Vulnerability, published 2023-12-05. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2023-12-05. EPSS: 0.7% chance of exploitation in the next 30 days. Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.
CVE-2023-33063: Qualcomm Multiple Chipsets Use-After-Free Vulnerability, published 2023-12-05. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2023-12-05. EPSS: 0.7% chance of exploitation in the next 30 days. Memory corruption in DSP Services during a remote call from HLOS to DSP.
CVE-2024-43047: Qualcomm Multiple Chipsets Use-After-Free Vulnerability, published 2024-10-07. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2024-10-08. EPSS: 0.7% chance of exploitation in the next 30 days. Memory corruption while maintaining memory maps of HLOS memory.
CVE-2022-22071: Qualcomm Multiple Chipsets Use-After-Free Vulnerability, published 2022-06-14. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2023-12-05. EPSS: 0.4% chance of exploitation in the next 30 days. Possible use after free when process shell memory is freed using IOCTL munmap call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
CVE-2021-30351, published 2022-01-03. Critical severity, CVSS 9.8. EPSS: 4% chance of exploitation in the next 30 days. An out of bound memory access can occur due to improper validation of number of frames being passed during music playback in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
CVE-2021-30317, published 2022-02-11. High severity, CVSS 7.8. EPSS: 1.4% chance of exploitation in the next 30 days. Improper validation of program headers containing ELF metadata can lead to image verification bypass in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics…
CVE-2022-40507, published 2023-06-06. High severity, CVSS 7.8. EPSS: 1.3% chance of exploitation in the next 30 days. Memory corruption due to double free in Core while mapping HLOS address to the list.
CVE-2022-40516, published 2023-01-09. High severity, CVSS 7.8. EPSS: 0.9% chance of exploitation in the next 30 days. Memory corruption in Core due to stack-based buffer overflow.
CVE-2021-1975, published 2021-11-12. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. Possible heap overflow due to improper length check of domain while parsing the DNS response in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon…

Latest

CVE-2025-47366, published 2026-02-02. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Cryptographic issue when a Trusted Zone with outdated code is triggered by a HLOS providing incorrect input.
CVE-2025-47369, published 2026-01-07. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. Information disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a session ID.
CVE-2025-47348, published 2026-01-07. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption while processing identity credential operations in the trusted application.
CVE-2025-47346, published 2026-01-07. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption while processing a secure logging command in the trusted application.
CVE-2025-47345, published 2026-01-07. High severity, CVSS 8.4. EPSS: 0.1% chance of exploitation in the next 30 days. Cryptographic issue may occur while encrypting license data.
CVE-2025-47344, published 2026-01-07. Medium severity, CVSS 6.4. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption while handling sensor utility operations.
CVE-2025-47339, published 2026-01-07. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption while deinitializing a HDCP session.
CVE-2025-47337, published 2026-01-07. Medium severity, CVSS 6.7. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption while accessing a synchronization object during concurrent operations.
CVE-2025-47335, published 2026-01-07. Medium severity, CVSS 6.7. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption while parsing clock configuration data for a specific hardware type.
CVE-2025-47334, published 2026-01-07. Medium severity, CVSS 6.7. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption while processing shared command buffer packet between camera userspace and kernel.