Skip to content

RadicalNotion.AI

We do not sell or share your personal information

© 2026 RadicalNotion.AI

Security Data

CWE Directory
CAPEC Directory
CNA Directory
CNA Report Cards
Data Sources

Calculators

CVSS Calculator
CVSS 4.0
CVSS 3.1
CVSS 3.0
CVSS 2.0

Platform

My Vulnerabilities
Insights
Notifications
Account
Pricing

Learn

All guides
What is a CVE?
What is CVSS?
The CISA KEV catalog
What is EPSS?

Company

About us
Blog
Book a demo

Get Started

Sign up
Log in

Legal

Privacy
Terms

Security data

Weaknesses (CWE)The MITRE CWE weakness catalog
Attack Patterns (CAPEC)MITRE CAPEC attack patterns
CNAsNumbering authorities + report cards
VendorsVulnerabilities by vendor

Tools

CVSS CalculatorScore CVSS 4.0, 3.1, 3.0 & 2.0

Resources

LearnPlain-English security guides
Data SourcesHow we source CVE data

About Us Blog Pricing Book a Demo

Log in

Home
Vendors
Qualcomm
Qcm6490 Firmware

qualcomm qcm6490 firmware Vulnerabilities: CVEs, CISA KEV & Security Advisories

586 CVEs

5 in CISA KEV

qualcomm qcm6490 firmware Vulnerabilities

CVE security advisories and vulnerability history for qcm6490 firmware by qualcomm.

586

Total CVEs

Published

5

In CISA KEV

Exploited in the wild

9

Public exploits

With known exploit

7.8

Avg CVSS

2021–2026

Last updated June 1, 2026

Overview

qualcomm qcm6490 firmware has 586 published CVE records since 2021, of which 5 are in CISA's Known Exploited Vulnerabilities catalog and 9 have a known public exploit. The average CVSS base score across scored CVEs is 7.8.

This page aggregates every publicly disclosed vulnerability (CVE) affecting qualcomm qcm6490 firmware, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of qualcomm qcm6490 firmware's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical43

High477

Medium66

Low0

In CISA’s Known Exploited Vulnerabilities catalog

5

5 of qualcomm qcm6490 firmware's CVEs are confirmed exploited in the wild.

Public exploits

9

9 of qualcomm qcm6490 firmware's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every qualcomm qcm6490 firmware version named in a CVE, then pick one to see only the CVEs that affect it.

No specific affected versions are recorded for qualcomm qcm6490 firmware; the CVEs below apply to the product without a version pin.

586 CVEs

Sort

Buffer Copy Without Checking Size of Input in Secure Processor
CVE-2026-25277CWE-120
High · CVSS 8.8
EPSS 0.0% (2th pct)2026-06-01
Improper Validation of Array Index in Secure Processor
CVE-2026-25276CWE-129
High · CVSS 8.8
EPSS 0.0% (2th pct)2026-06-01
Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service
CVE-2026-25260CWE-367
High · CVSS 7.8
EPSS 0.0% (1th pct)2026-06-01
Out-of-bounds Write in DSP Service
CVE-2026-25259CWE-787
High · CVSS 7.8
EPSS 0.0% (2th pct)2026-06-01
Improper Validation of Syntactic Correctness of Input in Display
CVE-2026-24091CWE-1286
High · CVSS 7.2
EPSS 0.0% (5th pct)2026-06-01
Improper Validation of Syntactic Correctness of Input in Kernel
CVE-2026-24089CWE-1286
High · CVSS 7.2
EPSS 0.0% (5th pct)2026-06-01
Missing Authentication for Critical Function in Boot
CVE-2026-24088CWE-306
High · CVSS 8.2
EPSS 0.0% (1th pct)2026-06-01
Stack-based Buffer Overflow in Display
CVE-2026-24085CWE-121
High · CVSS 7.2
EPSS 0.0% (2th pct)2026-06-01
Stack-based Buffer Overflow in Windows Compute
CVE-2025-59613CWE-121
Medium · CVSS 6.7
EPSS 0.0% (1th pct)2026-06-01
Stack-based Buffer Overflow in Windows Compute
CVE-2025-59612CWE-121
Medium · CVSS 6.7
EPSS 0.0% (1th pct)2026-06-01
Out-of-bounds Write in Core Services
CVE-2025-59611CWE-787
Medium · CVSS 6.7
EPSS 0.0% (1th pct)2026-06-01
Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver
CVE-2025-59610CWE-367
Medium · CVSS 6.4
EPSS 0.0% (1th pct)2026-06-01
Buffer Over-read in WLAN Host Communication
CVE-2025-59609CWE-126
Medium · CVSS 5.5
EPSS 0.0% (9th pct)2026-06-01
NULL Pointer Dereference in HLOS
CVE-2025-59606CWE-476
High · CVSS 7.8
EPSS 0.0% (2th pct)2026-06-01
Out-of-bounds Write in HLOS
CVE-2025-59605CWE-787
High · CVSS 7.8
EPSS 0.0% (2th pct)2026-06-01
NULL Pointer Dereference in SPS Applications
CVE-2025-59604CWE-476
High · CVSS 7.8
EPSS 0.0% (2th pct)2026-06-01
Use After Free in Automotive GPU
CVE-2026-24082CWE-416
High · CVSS 7.8
EPSS 0.0% (3th pct)2026-05-04
Buffer Over-read in DSP Service
CVE-2025-47406CWE-126
Medium · CVSS 6.1
EPSS 0.0% (2th pct)2026-05-04
Buffer Copy Without Checking Size of Input in Automotive Audio
CVE-2025-47404CWE-120
Medium · CVSS 6.5
EPSS 0.0% (3th pct)2026-05-04
Buffer Over-read in WLAN Firmware
CVE-2025-47403CWE-126
Medium · CVSS 6.5
EPSS 0.0% (13th pct)2026-05-04
Buffer Over-read in WLAN HAL
CVE-2025-47401CWE-126
Medium · CVSS 6.5
EPSS 0.0% (13th pct)2026-05-04
Buffer Over-read in Camera
CVE-2026-21378CWE-126
High · CVSS 7.8
EPSS 0.0% (3th pct)2026-04-06
Buffer Over-read in Camera
CVE-2026-21376CWE-126
High · CVSS 7.8
EPSS 0.0% (0th pct)2026-04-06
Buffer Over-read in Camera
CVE-2026-21375CWE-126
High · CVSS 7.8
EPSS 0.0% (3th pct)2026-04-06
Buffer Over-read in Camera
CVE-2026-21374CWE-126
High · CVSS 7.8
EPSS 0.0% (0th pct)2026-04-06
Buffer Over-read in Camera
CVE-2026-21373CWE-126
High · CVSS 7.8
EPSS 0.0% (3th pct)2026-04-06
Heap-Based Buffer Overflow in Power Management IC
CVE-2026-21372CWE-122
High · CVSS 7.8
EPSS 0.0% (0th pct)2026-04-06
Buffer Over-read in WinBlast Driver
CVE-2026-21371CWE-126
High · CVSS 7.8
EPSS 0.0% (0th pct)2026-04-06
Integer Overflow or Wraparound in GPS
CVE-2025-47392CWE-190
High · CVSS 8.8
EPSS 0.0% (1th pct)2026-04-06
Stack-based Buffer Overflow in Camera Driver
CVE-2025-47391CWE-121
High · CVSS 7.8
EPSS 0.0% (0th pct)2026-04-06

Showing 30 of 586

Common weakness types

The CWE weakness categories most often found in qualcomm qcm6490 firmware CVEs. Follow any weakness for its full explanation.

CWE-126Buffer Over-read88 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')50 CVEs
CWE-416Use After Free46 CVEs
CWE-787Out-of-bounds Write23 CVEs
CWE-129Improper Validation of Array Index22 CVEs
CWE-617Reachable Assertion22 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer16 CVEs
CWE-20Improper Input Validation16 CVEs

Disclosure activity by year

How many qualcomm qcm6490 firmware CVEs were published each year.

2021

38

2022

130

2023

143

2024

118

2025

100

2026

57

Other qualcomm products

Browse vulnerabilities for other products by qualcomm.

wcd93801,205 CVEs wcd9380 firmware1,171 CVEs wsa88301,137 CVEs wsa88351,136 CVEs wcd93851,116 CVEs qca6574au1,105 CVEs wsa8830 firmware1,105 CVEs wsa8835 firmware1,104 CVEs

All qualcomm vulnerabilities

Frequently asked questions

Common questions about qualcomm qcm6490 firmware vulnerabilities.

How many CVEs does qualcomm qcm6490 firmware have?

qualcomm qcm6490 firmware has 586 published CVE records since 2021.

How many qualcomm qcm6490 firmware CVEs are in CISA KEV?

Yes — 5 of qualcomm qcm6490 firmware's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Are there public exploits for qualcomm qcm6490 firmware vulnerabilities?

Yes — 9 of qualcomm qcm6490 firmware's CVEs have a known public exploit.

What are the most common weakness types in qualcomm qcm6490 firmware CVEs?

qualcomm qcm6490 firmware's CVEs most often map to these CWE weakness types: CWE-126 (Buffer Over-read), CWE-120 (Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')), CWE-416 (Use After Free), CWE-787 (Out-of-bounds Write).

How many critical qualcomm qcm6490 firmware vulnerabilities are there?

qualcomm qcm6490 firmware has 43 critical and 477 high-severity CVEs.

What is the average severity of qualcomm qcm6490 firmware CVEs?

The average CVSS base score across qualcomm qcm6490 firmware's scored CVEs is 7.8.

References

All qualcomm vulnerabilities
The MITRE CVE Program (opens in a new tab)
Learn: What is a CVE?
CWE directory: the weakness types these CVEs map to

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track qualcomm qcm6490 firmware vulnerabilities

Monitor new qualcomm qcm6490 firmware vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing

On this page

Overview
Severity and exploitation
Affected versions and CVEs
Common weakness types
Disclosure activity
Other products
FAQ
References