What’s Vulnerable › Products

Qualcomm Qcm2290 Firmware vulnerabilities

457 known vulnerabilities, 8 confirmed exploited in the wild (CISA KEV), 50 published in the last 12 months.

Check whether your Qualcomm Qcm2290 Firmware version is affected

Exploited Qualcomm Qcm2290 Firmware vulnerabilities

• CVE-2026-21385 — Qualcomm Multiple Chipsets Memory Corruption Vulnerability
• CVE-2023-33107 — Qualcomm Multiple Chipsets Integer Overflow Vulnerability
• CVE-2023-33106 — Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability
• CVE-2023-33063 — Qualcomm Multiple Chipsets Use-After-Free Vulnerability
• CVE-2022-22071 — Qualcomm Multiple Chipsets Use-After-Free Vulnerability
• CVE-2020-11261 — Qualcomm Multiple Chipsets Improper Input Validation Vulnerability
• CVE-2021-1906 — Qualcomm Multiple Chipsets Detection of Error Condition Without Action Vulnerability
• CVE-2021-1905 — Qualcomm Multiple Chipsets Use-After-Free Vulnerability

Latest Qualcomm Qcm2290 Firmware vulnerabilities

• CVE-2026-57554 — Use After Free in DSP Service (CVSS 7.8)
• CVE-2026-57545 — Untrusted Pointer Dereference in Graphics (CVSS 7.8)
• CVE-2026-25302 — Improper Verification of Cryptographic Signature in Boot (CVSS 7.1)
• CVE-2026-25270 — Out-of-bounds Write in Camera Driver (CVSS 6.7)
• CVE-2026-25267 — Missing Authorization in Core (CVSS 7.8)
• CVE-2026-25263 — Out of Bounds write in Linux Camera (CVSS 6.6)
• CVE-2026-25275 — Buffer Over-read in WLAN Firmware (CVSS 7.5)
• CVE-2026-25292 — Improper Validation of Syntactic Correctness of Input in Automotive Linux OS (CVSS 7.6)
• CVE-2026-24079 — Missing Authentication for Critical Function in Data Modem (CVSS 8.1)
• CVE-2026-24078 — Exposure of Private Personal Information to an Unauthorized Actor in Data Modem (CVSS 6.5)
• CVE-2026-24077 — Integer Underflow (Wrap or Wraparound) in WLAN Host (CVSS 6.5)
• CVE-2026-21369 — Out-of-bounds Write in Camera Driver (CVSS 5.3)
• CVE-2026-24092 — Improper Validation of Syntactic Correctness of Input in Display (CVSS 7.2)
• CVE-2026-24091 — Improper Validation of Syntactic Correctness of Input in Display (CVSS 7.2)
• CVE-2026-24090 — Missing Authentication for Critical Function in HLOS (CVSS 7.1)
• CVE-2026-24089 — Improper Validation of Syntactic Correctness of Input in Kernel (CVSS 7.2)
• CVE-2026-24088 — Missing Authentication for Critical Function in Boot (CVSS 8.2)
• CVE-2026-24087 — Improper Validation of Syntactic Correctness of Input in Kernel (CVSS 7.2)
• CVE-2026-24085 — Stack-based Buffer Overflow in Display (CVSS 7.2)
• CVE-2025-59610 — Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver (CVSS 6.4)
• CVE-2025-59605 — Out-of-bounds Write in HLOS (CVSS 7.8)
• CVE-2025-59604 — NULL Pointer Dereference in SPS Applications (CVSS 7.8)
• CVE-2026-24082 — Use After Free in Automotive GPU (CVSS 7.8)
• CVE-2025-47407 — Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service (CVSS 7.0)
• CVE-2025-47404 — Buffer Copy Without Checking Size of Input in Automotive Audio (CVSS 7.8)