Vulnerabilidades do Qualcomm Sm6250 Firmware
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Qualcomm Sm6250 Firmware: 26 registro(s), com versões afetadas e correções.cpe:2.3:o:qualcomm:sm6250_firmware
CVE-2026-25267
Alta · 7.8
CWE-862 06/10/2026
Missing Authorization in Core
Memory corruption when non-secure loader rewrites page tables before secure memory initialization.
CVE-2026-25263
Média · 6.6
CWE-787 06/10/2026
Out of Bounds write in Linux Camera
Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters.
CVE-2026-25275
Alta · 7.5
CWE-126 17/09/2026
Buffer Over-read in WLAN Firmware
Transient DOS when processing authentication frames with invalid FILS information element header lengths.
CVE-2026-24075
Alta · 7.0
CWE-126 17/09/2026
Buffer Over-read in Qualcomm IPC
Memory Corruption when multiple threads issue concurrent IOCTL requests to the device control handler due to improper synchronization and race conditions.
CVE-2026-24074
Alta · 7.8
CWE-787 17/09/2026
Out-of-bounds Write in Video
Memory Corruption when processing data with large offset and length values exceeds buffer limits during data copy operations.
CVE-2026-24076
Média · 6.7
CWE-120 04/08/2026
Buffer Copy Without Checking Size of Input in Bluetooth HOST
Memory Corruption when processing registry values with incorrect types using a direct query method.
CVE-2025-59611
Média · 6.7
CWE-787 01/06/2026
Out-of-bounds Write in Core Services
Memory corruption in diagnostic services due to absence of input validation
CVE-2025-47408
Alta · 7.8
CWE-119 04/05/2026
Untrusted Pointer Dereference in Power Optimization Firmware
Memory corruption when another driver calls an IOCTL with invalid input/output buffer.
CVE-2026-21378
Alta · 7.8
CWE-126 06/04/2026
Buffer Over-read in Camera
Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver.
CVE-2026-21376
Alta · 7.8
CWE-126 06/04/2026
Buffer Over-read in Camera
Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver.
CVE-2026-21374
Alta · 7.8
CWE-126 06/04/2026
Buffer Over-read in Camera
Memory Corruption when processing auxiliary sensor input/output control commands with insufficient buffer size validation.
CVE-2026-21373
Alta · 7.8
CWE-126 06/04/2026
Buffer Over-read in Camera
Memory Corruption when accessing an output buffer without validating its size during IOCTL processing.
CVE-2026-21371
Alta · 7.8
CWE-126 06/04/2026
Buffer Over-read in WinBlast Driver
Memory Corruption when retrieving output buffer with insufficient size validation.
CVE-2025-47392
Alta · 8.8
CWE-190 06/04/2026
Integer Overflow or Wraparound in GPS
Memory corruption when decoding corrupted satellite data files with invalid signature offsets.
CVE-2025-47383
Alta · 7.2
CWE-325 02/03/2026
Missing Cryptographic Step in Data Modem
Weak configuration may lead to cryptographic issue when a VoWiFi call is triggered from UE.
CVE-2025-47371
Média · 6.5
CWE-617 02/03/2026
Reachable Assertion in Modem
Transient DOS when an LTE RLC packet with invalid TB is received by UE.
CVE-2025-47387
Alta · 7.8
CWE-822 18/12/2025
Untrusted Pointer Dereference in Camera
Memory Corruption when processing IOCTLs for JPEG data without verification.
CVE-2025-27054
Alta · 7.8
CWE-787 09/10/2025
Out-of-bounds Write in Display
Memory corruption while processing a malformed license file during reboot.
CVE-2025-27053
Alta · 7.8
CWE-131 09/10/2025
Incorrect Calculation of Buffer Size in HLOS
Memory corruption during PlayReady APP usecase while processing TA commands.
CVE-2025-21479
Alta · 8.6
KEV Alta · 56 Exploit público CWE-863 03/06/2025
Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability
Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.
CVE-2025-21480
Alta · 8.6
KEV Alta · 47 CWE-863 03/06/2025
Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability
Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.
CVE-2023-33107
Alta · 7.8
KEV Alta · 55 Exploit público CWE-190 05/12/2023
Qualcomm Multiple Chipsets Integer Overflow Vulnerability
Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.
CVE-2023-33063
Alta · 7.8
KEV Alta · 49 CWE-416 05/12/2023
Qualcomm Multiple Chipsets Use-After-Free Vulnerability
Memory corruption in DSP Services during a remote call from HLOS to DSP.
CVE-2020-11261
Alta · 7.8
KEV Alta · 52 CWE-787 09/06/2021
Qualcomm Multiple Chipsets Improper Input Validation Vulnerability
Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2021-1905
Alta · 7.8
KEV Alta · 58 Exploit público CWE-416 07/05/2021
Qualcomm Multiple Chipsets Use-After-Free Vulnerability
Possible use after free due to improper handling of memory mapping of multiple processes simultaneously. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables