QF
Product
Qcm6125 Firmware
On CISA KEVExploited in the wild
211
CVEs
2
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 26High 143Medium 42Low 0
Watch
Add Qcm6125 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-35100 | 7.5 | Jun 14 | Possible buffer over read due to improper calculation of string length while parsing Id3 tag in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2021-30344 | 7.5 | Jun 14 | Improper authorization of a replayed LTE security mode command can lead to a denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2022-22064 | 7.5 | Jun 14 | Possible buffer over read due to lack of size validation while unpacking frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics… Affected: All versions, or not specified |
| CVE-2021-35078 | 7.5 | Jun 14 | Possible memory leak due to improper validation of certificate chain length while parsing server certificate chain in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2021-1936 | 7.5 | Oct 20 | Null pointer dereference can occur due to lack of null check for user provided input in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2021-1970 | 7.5 | Jul 13 | Possible out of bound read due to lack of length check of FT sub-elements in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1907 | 7.5 | Jul 13 | Possible buffer overflow due to lack of length check in BA request in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial… Affected: All versions, or not specified |
| CVE-2020-3704 | 7.5 | Nov 2 | u'While processing invalid connection request PDU which is nonstandard (interval or timeout is 0) from central device may lead peripheral system enter into dead lock state.(This… Affected: All versions, or not specified |
| CVE-2026-24085 | 7.2 | Jun 1 | Stack-based Buffer Overflow in Display Affected: All versions, or not specified |
| CVE-2025-47383 | 7.2 | Mar 2 | Missing Cryptographic Step in Data Modem Affected: All versions, or not specified |
| CVE-2023-21652 | 7.1 | Aug 8 | Key Management Errors in HLOS Affected: 0 |
| CVE-2023-21626 | 7.1 | Aug 8 | Improper Authentication in HLOS. Affected: All versions, or not specified |
| CVE-2021-35084 | 7.1 | Jun 14 | Possible out of bound read due to lack of length check of data length for a DIAG event in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2021-30297 | 7.1 | Oct 20 | Possible out of bound read due to improper validation of packet length while handling data transfer in VR service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2021-1985 | 7.1 | Oct 20 | Possible buffer over read due to lack of data length check in QVR Service configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2021-1930 | 7.1 | Sep 8 | Possible out of bounds read due to incorrect validation of incoming buffer length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2020-11304 | 7.1 | Jun 9 | Possible out of bound read in DRM due to improper buffer length check Affected: All versions, or not specified |
| CVE-2022-33214 | 7.0 | Oct 17 | Memory corruption in display due to time-of-check time-of-use of metadata reserved size in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT,… Affected: All versions, or not specified |
| CVE-2020-11298 | 7.0 | Jun 9 | While waiting for a response to a callback or listener request, non-secure clients can change permissions to shared memory buffers used by HLOS Invoke Call to secure kernel in… Affected: All versions, or not specified |
| CVE-2024-33016 | 6.8 | Sep 2 | Improper Restriction of Operations within the Bounds of a Memory Buffer in Storage Affected: All versions, or not specified |
| CVE-2023-21629 | 6.8 | Jul 4 | Double Free in Modem Affected: 0 |
| CVE-2021-35097 | 6.8 | Sep 2 | Possible authentication bypass due to improper order of signature verification and hashing in the signature verification call in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2024-49848 | 6.7 | Apr 7 | Use After Free in DSP Service Affected: All versions, or not specified |
| CVE-2021-30299 | 6.7 | Nov 22 | Improper Input Validation in Audio Affected: 0 |
| CVE-2021-30349 | 6.7 | Jun 14 | Improper access control sequence for AC database after memory allocation can lead to possible memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2021-35098 | 6.7 | Jun 14 | Improper validation of session id in PCM routing process can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2021-35120 | 6.7 | Jun 14 | Improper handling between export and release functions on the same handle from client can lead to use after free in Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-35118 | 6.7 | Jun 14 | An out-of-bounds write can occur due to an incorrect input check in the camera driver in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2021-30265 | 6.7 | Nov 12 | Possible memory corruption due to improper validation of memory address while processing user-space IOCTL for clearing Filter and Route statistics in Snapdragon Auto, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1966 | 6.7 | Oct 20 | Possible buffer overflow due to lack of length check of source and destination buffer before copying in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1963 | 6.7 | Sep 9 | Possible use-after-free due to lack of validation for the rule count in filter table in IPA driver in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1961 | 6.7 | Sep 9 | Possible buffer overflow due to lack of offset length check while updating the buffer value in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2021-1931 | 6.7 | Jul 13 | Possible buffer overflow due to improper validation of buffer length while processing fast boot commands in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2025-21465 | 6.5 | Aug 6 | Out-of-bounds Read in Core Affected: All versions, or not specified |
| CVE-2025-21464 | 6.5 | Aug 6 | Out-of-bounds Read in Core Affected: All versions, or not specified |
| CVE-2022-33255 | 6.5 | Jan 6 | Buffer over-read in Bluetooth HOST Affected: All versions, or not specified |
| CVE-2021-1960 | 6.5 | Sep 9 | Improper handling of ASB-C broadcast packets with crafted opcode in LMP can lead to uncontrolled resource consumption in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1957 | 6.5 | Sep 9 | Improper Access Control when ACL link encryption is failed and ACL link is not disconnected during reconnection with paired device in Snapdragon Auto, Snapdragon Compute,… Affected: All versions, or not specified |
| CVE-2024-45551 | 6.2 | Apr 7 | Weak Authentication in HLOS Affected: All versions, or not specified |
| CVE-2025-47331 | 6.1 | Jan 6 | Buffer Over-read in Video Affected: All versions, or not specified |
| CVE-2021-30342 | 5.9 | Jun 14 | Improper integrity check can lead to race condition between tasks PDCP and RRC? after a valid RRC Command packet has been received in Snapdragon Auto, Snapdragon Compute,… Affected: All versions, or not specified |
| CVE-2025-47330 | 5.5 | Jan 6 | Buffer Over-read in Video Affected: All versions, or not specified |
| CVE-2024-43051 | 5.5 | Mar 3 | Improper Authorization in SPS-HLOS Affected: All versions, or not specified |
| CVE-2024-33043 | 5.5 | Sep 2 | Buffer Over-read in FM Host Affected: All versions, or not specified |
| CVE-2024-23357 | 5.5 | Aug 5 | NULL Pointer Dereference in HLOS Affected: All versions, or not specified |
| CVE-2023-33070 | 5.5 | Dec 5 | Improper Authentication in Automotive OS Affected: All versions, or not specified |
| CVE-2023-28566 | 5.5 | Nov 7 | Buffer Over-read in WLAN HAL Affected: All versions, or not specified |
| CVE-2022-22075 | 5.5 | Mar 7 | Information Exposure in Graphics Affected: All versions, or not specified |
| CVE-2022-40519 | 5.5 | Jan 6 | Buffer over-read in Core Affected: All versions, or not specified |
| CVE-2022-40518 | 5.5 | Jan 6 | Buffer overread in Core Affected: All versions, or not specified |
