Qualcomm Sm6250 Firmware vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Qualcomm Sm6250 Firmware: 26 record(s), with affected versions and fixes.cpe:2.3:o:qualcomm:sm6250_firmware
CVE-2026-25267
High · 7.8
CWE-862 Oct 6, 2026
Missing Authorization in Core
Memory corruption when non-secure loader rewrites page tables before secure memory initialization.
CVE-2026-25263
Medium · 6.6
CWE-787 Oct 6, 2026
Out of Bounds write in Linux Camera
Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters.
CVE-2026-25275
High · 7.5
CWE-126 Sep 17, 2026
Buffer Over-read in WLAN Firmware
Transient DOS when processing authentication frames with invalid FILS information element header lengths.
CVE-2026-24075
High · 7.0
CWE-126 Sep 17, 2026
Buffer Over-read in Qualcomm IPC
Memory Corruption when multiple threads issue concurrent IOCTL requests to the device control handler due to improper synchronization and race conditions.
CVE-2026-24074
High · 7.8
CWE-787 Sep 17, 2026
Out-of-bounds Write in Video
Memory Corruption when processing data with large offset and length values exceeds buffer limits during data copy operations.
CVE-2026-24076
Medium · 6.7
CWE-120 Aug 4, 2026
Buffer Copy Without Checking Size of Input in Bluetooth HOST
Memory Corruption when processing registry values with incorrect types using a direct query method.
CVE-2025-59611
Medium · 6.7
CWE-787 Jun 1, 2026
Out-of-bounds Write in Core Services
Memory corruption in diagnostic services due to absence of input validation
CVE-2025-47408
High · 7.8
CWE-119 May 4, 2026
Untrusted Pointer Dereference in Power Optimization Firmware
Memory corruption when another driver calls an IOCTL with invalid input/output buffer.
CVE-2026-21378
High · 7.8
CWE-126 Apr 6, 2026
Buffer Over-read in Camera
Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver.
CVE-2026-21376
High · 7.8
CWE-126 Apr 6, 2026
Buffer Over-read in Camera
Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver.
CVE-2026-21374
High · 7.8
CWE-126 Apr 6, 2026
Buffer Over-read in Camera
Memory Corruption when processing auxiliary sensor input/output control commands with insufficient buffer size validation.
CVE-2026-21373
High · 7.8
CWE-126 Apr 6, 2026
Buffer Over-read in Camera
Memory Corruption when accessing an output buffer without validating its size during IOCTL processing.
CVE-2026-21371
High · 7.8
CWE-126 Apr 6, 2026
Buffer Over-read in WinBlast Driver
Memory Corruption when retrieving output buffer with insufficient size validation.
CVE-2025-47392
High · 8.8
CWE-190 Apr 6, 2026
Integer Overflow or Wraparound in GPS
Memory corruption when decoding corrupted satellite data files with invalid signature offsets.
CVE-2025-47383
High · 7.2
CWE-325 Mar 2, 2026
Missing Cryptographic Step in Data Modem
Weak configuration may lead to cryptographic issue when a VoWiFi call is triggered from UE.
CVE-2025-47371
Medium · 6.5
CWE-617 Mar 2, 2026
Reachable Assertion in Modem
Transient DOS when an LTE RLC packet with invalid TB is received by UE.
CVE-2025-47387
High · 7.8
CWE-822 Dec 18, 2025
Untrusted Pointer Dereference in Camera
Memory Corruption when processing IOCTLs for JPEG data without verification.
CVE-2025-27054
High · 7.8
CWE-787 Oct 9, 2025
Out-of-bounds Write in Display
Memory corruption while processing a malformed license file during reboot.
CVE-2025-27053
High · 7.8
CWE-131 Oct 9, 2025
Incorrect Calculation of Buffer Size in HLOS
Memory corruption during PlayReady APP usecase while processing TA commands.
CVE-2025-21479
High · 8.6
KEV High · 56 Public exploit CWE-863 Jun 3, 2025
Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability
Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.
CVE-2025-21480
High · 8.6
KEV High · 47 CWE-863 Jun 3, 2025
Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability
Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.
CVE-2023-33107
High · 7.8
KEV High · 55 Public exploit CWE-190 Dec 5, 2023
Qualcomm Multiple Chipsets Integer Overflow Vulnerability
Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.
CVE-2023-33063
High · 7.8
KEV High · 49 CWE-416 Dec 5, 2023
Qualcomm Multiple Chipsets Use-After-Free Vulnerability
Memory corruption in DSP Services during a remote call from HLOS to DSP.
CVE-2020-11261
High · 7.8
KEV High · 52 CWE-787 Jun 9, 2021
Qualcomm Multiple Chipsets Improper Input Validation Vulnerability
Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2021-1905
High · 7.8
KEV High · 58 Public exploit CWE-416 May 7, 2021
Qualcomm Multiple Chipsets Use-After-Free Vulnerability
Possible use after free due to improper handling of memory mapping of multiple processes simultaneously. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables