Skip to content

RadicalNotion.AI

We do not sell or share your personal information

© 2026 RadicalNotion.AI

Security Data

CWE Directory
CAPEC Directory
CNA Directory
CNA Report Cards
Data Sources

Calculators

CVSS Calculator
CVSS 4.0
CVSS 3.1
CVSS 3.0
CVSS 2.0

Platform

My Vulnerabilities
Insights
Notifications
Account
Pricing

Learn

All guides
What is a CVE?
What is CVSS?
The CISA KEV catalog
What is EPSS?

Company

About us
Blog
Book a demo

Get Started

Sign up
Log in

Legal

Privacy
Terms

Security data

Weaknesses (CWE)The MITRE CWE weakness catalog
Attack Patterns (CAPEC)MITRE CAPEC attack patterns
CNAsNumbering authorities + report cards
VendorsVulnerabilities by vendor

Tools

CVSS CalculatorScore CVSS 4.0, 3.1, 3.0 & 2.0

Resources

LearnPlain-English security guides
Data SourcesHow we source CVE data

About Us Blog Pricing Book a Demo

Log in

Home
Vendors
Qualcomm
Qcm4290 Firmware

qualcomm qcm4290 firmware Vulnerabilities: CVEs, CISA KEV & Security Advisories

450 CVEs

7 in CISA KEV

qualcomm qcm4290 firmware Vulnerabilities

CVE security advisories and vulnerability history for qcm4290 firmware by qualcomm.

450

Total CVEs

Published

7

In CISA KEV

Exploited in the wild

12

Public exploits

With known exploit

7.8

Avg CVSS

2020–2025

Last updated October 9, 2025

Overview

qualcomm qcm4290 firmware has 450 published CVE records since 2020, of which 7 are in CISA's Known Exploited Vulnerabilities catalog and 12 have a known public exploit. The average CVSS base score across scored CVEs is 7.8.

This page aggregates every publicly disclosed vulnerability (CVE) affecting qualcomm qcm4290 firmware, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of qualcomm qcm4290 firmware's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical43

High299

Medium53

Low0

55 additional CVEs have no CVSS severity score.

In CISA’s Known Exploited Vulnerabilities catalog

7

7 of qualcomm qcm4290 firmware's CVEs are confirmed exploited in the wild.

Public exploits

12

12 of qualcomm qcm4290 firmware's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every qualcomm qcm4290 firmware version named in a CVE, then pick one to see only the CVEs that affect it.

No specific affected versions are recorded for qualcomm qcm4290 firmware; the CVEs below apply to the product without a version pin.

450 CVEs

Sort

Out-of-bounds Write in Display
CVE-2025-27054CWE-787
High · CVSS 7.8
EPSS 0.0% (5th pct)2025-10-09
Incorrect Calculation of Buffer Size in HLOS
CVE-2025-27053CWE-131
High · CVSS 7.8
EPSS 0.0% (5th pct)2025-10-09
Buffer Over-read in Data Network Stack & Connectivity
CVE-2025-21487CWE-126
High · CVSS 8.2
EPSS 0.1% (17th pct)2025-09-24
Improper Restriction of Operations within the Bounds of a Memory Buffer in Data Network Stack & Connectivity
CVE-2025-21483CWE-119
Critical · CVSS 9.8
EPSS 0.1% (18th pct)2025-09-24
Buffer Copy Without Checking Size of Input in HLOS
CVE-2025-21481CWE-120
High · CVSS 7.8
EPSS 0.0% (2th pct)2025-09-24
Reachable Assertion in WLAN Firmware
CVE-2025-27066CWE-617
High · CVSS 7.5
EPSS 0.2% (38th pct)2025-08-06
Out-of-bounds Read in Core
CVE-2025-21465CWE-125
Medium · CVSS 6.5
EPSS 0.1% (19th pct)2025-08-06
Out-of-bounds Read in Core
CVE-2025-21464CWE-125
Medium · CVSS 6.5
EPSS 0.1% (19th pct)2025-08-06
Out-of-bounds Write in Video
CVE-2025-27061CWE-787
High · CVSS 7.8
EPSS 0.1% (21th pct)2025-07-08
Incorrect Calculation of Buffer Size in Video
CVE-2025-27042CWE-131
High · CVSS 7.8
EPSS 0.1% (21th pct)2025-07-08
NULL Pointer Dereference in SPS-HLOS
CVE-2025-21433CWE-476
Medium · CVSS 6.2
EPSS 0.1% (20th pct)2025-07-08
Double Free in SPS-HLOS
CVE-2025-21432CWE-415
High · CVSS 7.8
EPSS 0.1% (21th pct)2025-07-08
High vulnerability · 2025-06-03
CVE-2024-53026CWE-126
High · CVSS 8.2
EPSS 0.3% (56th pct)2025-06-03
High vulnerability · 2025-06-03
CVE-2024-53021CWE-126
High · CVSS 8.2
EPSS 0.3% (56th pct)2025-06-03
Buffer Over-read in Data Network Stack & Connectivity
CVE-2024-53020CWE-126
High · CVSS 8.2
EPSS 0.3% (56th pct)2025-06-03
Use After Free in GPS HLOS Driver
CVE-2025-21453CWE-416
High · CVSS 7.8
EPSS 0.1% (21th pct)2025-05-06
High vulnerability · 2025-05-06
CVE-2024-49835CWE-787
High · CVSS 7.8
EPSS 0.1% (21th pct)2025-05-06
Buffer Over-read in WLAN Host
CVE-2025-21430CWE-126
High · CVSS 7.5
EPSS 0.4% (62th pct)2025-04-07
Buffer Over-read in WLAN Host
CVE-2025-21429CWE-126
High · CVSS 7.5
EPSS 0.7% (72th pct)2025-04-07
Weak Authentication in HLOS
CVE-2024-45551CWE-1390
Medium · CVSS 6.2
EPSS 0.0% (2th pct)2025-04-07
Medium vulnerability · 2025-04-07
CVE-2024-43046CWE-200
Medium · CVSS 5.5
EPSS 0.1% (24th pct)2025-04-07
Use After Free in NPU
CVE-2025-21424CWE-416
High · CVSS 7.8
EPSS 0.2% (43th pct)2025-03-03
High vulnerability · 2025-03-03
CVE-2024-53027CWE-120
High · CVSS 7.5
EPSS 0.3% (55th pct)2025-03-03
High vulnerability · 2025-03-03
CVE-2024-53014CWE-129
High · CVSS 7.8
EPSS 0.1% (29th pct)2025-03-03
Medium vulnerability · 2025-03-03
CVE-2024-43051CWE-285
Medium · CVSS 5.5
EPSS 0.0% (11th pct)2025-03-03
Improper Authentication in Modem
CVE-2024-38426CWE-287
Medium · CVSS 5.4
EPSS 0.1% (31th pct)2025-03-03
Medium vulnerability · 2024-11-22
CVE-2021-30299
Patch
CWE-20
Medium · CVSS 6.7
EPSS 0.0% (7th pct)2024-11-22
High vulnerability · 2024-11-04
CVE-2024-38423
Patch
CWE-120
High · CVSS 7.8
EPSS 0.2% (43th pct)2024-11-04
High vulnerability · 2024-11-04
CVE-2024-38422
Patch
CWE-680
High · CVSS 7.8
EPSS 0.2% (43th pct)2024-11-04
High vulnerability · 2024-11-04
CVE-2024-38415
Patch
CWE-416
High · CVSS 7.8
EPSS 0.2% (43th pct)2024-11-04

Showing 30 of 450

Common weakness types

The CWE weakness categories most often found in qualcomm qcm4290 firmware CVEs. Follow any weakness for its full explanation.

CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')28 CVEs
CWE-126Buffer Over-read27 CVEs
CWE-416Use After Free14 CVEs
CWE-129Improper Validation of Array Index10 CVEs
CWE-823Use of Out-of-range Pointer Offset10 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer10 CVEs
CWE-125Out-of-bounds Read9 CVEs
CWE-190Integer Overflow or Wraparound8 CVEs

Disclosure activity by year

How many qualcomm qcm4290 firmware CVEs were published each year.

2020

12

2021

140

2022

124

2023

99

2024

49

2025

26

Other qualcomm products

Browse vulnerabilities for other products by qualcomm.

wcd93801,205 CVEs wcd9380 firmware1,171 CVEs wsa88301,137 CVEs wsa88351,136 CVEs wcd93851,116 CVEs qca6574au1,105 CVEs wsa8830 firmware1,105 CVEs wsa8835 firmware1,104 CVEs

All qualcomm vulnerabilities

Frequently asked questions

Common questions about qualcomm qcm4290 firmware vulnerabilities.

How many CVEs does qualcomm qcm4290 firmware have?

qualcomm qcm4290 firmware has 450 published CVE records since 2020.

How many qualcomm qcm4290 firmware CVEs are in CISA KEV?

Yes — 7 of qualcomm qcm4290 firmware's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Are there public exploits for qualcomm qcm4290 firmware vulnerabilities?

Yes — 12 of qualcomm qcm4290 firmware's CVEs have a known public exploit.

What are the most common weakness types in qualcomm qcm4290 firmware CVEs?

qualcomm qcm4290 firmware's CVEs most often map to these CWE weakness types: CWE-120 (Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')), CWE-126 (Buffer Over-read), CWE-416 (Use After Free), CWE-129 (Improper Validation of Array Index).

How many critical qualcomm qcm4290 firmware vulnerabilities are there?

qualcomm qcm4290 firmware has 43 critical and 299 high-severity CVEs.

What is the average severity of qualcomm qcm4290 firmware CVEs?

The average CVSS base score across qualcomm qcm4290 firmware's scored CVEs is 7.8.

References

All qualcomm vulnerabilities
The MITRE CVE Program (opens in a new tab)
Learn: What is a CVE?
CWE directory: the weakness types these CVEs map to

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track qualcomm qcm4290 firmware vulnerabilities

Monitor new qualcomm qcm4290 firmware vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing

On this page

Overview
Severity and exploitation
Affected versions and CVEs
Common weakness types
Disclosure activity
Other products
FAQ
References