S5
Product
Sd865 5g Firmware
On CISA KEVExploited in the wild
258
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 15High 190Medium 53Low 0
Watch
Add Sd865 5g Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-43047 In wildKEV | 7.8 | Oct 7 | Use After Free in DSP Service Affected: 0 |
| CVE-2022-22071 In wildKEV | 7.8 | Jun 14 | Qualcomm Multiple Chipsets Use-After-Free Vulnerability Affected: All versions, or not specified |
| CVE-2025-27071 | 9.8 | Aug 6 | Buffer Copy Without Checking Size of Input in Powerline Communication Firmware Affected: All versions, or not specified |
| CVE-2024-21463 | 9.8 | Apr 1 | Buffer Copy Without Checking Size of Input in Audio Affected: 0 |
| CVE-2023-43548 | 9.8 | Mar 4 | Buffer Copy Without Checking Size of Input in Video Affected: 0 |
| CVE-2023-43519 | 9.8 | Feb 6 | Buffer Copy without Checking Size of Input (`Classic Buffer Overflow`) in Video Affected: 0 |
| CVE-2023-28581 | 9.8 | Sep 5 | Improper Restriction of Operations within the Bounds of a Memory Buffer in WLAN Firmware Affected: All versions, or not specified |
| CVE-2023-21631 | 9.8 | Jul 4 | Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network Affected: All versions, or not specified |
| CVE-2022-33256 | 9.8 | Mar 10 | Memory corruption due to improper validation of array index in Multi-mode call processor Affected: All versions, or not specified |
| CVE-2022-25686 | 9.8 | Sep 16 | Memory corruption in video module due to buffer overflow while processing WAV file in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT,… Affected: All versions, or not specified |
| CVE-2022-25657 | 9.8 | Sep 2 | Memory corruption due to buffer overflow occurs while processing invalid MKV clip which has invalid seek header in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2022-22096 | 9.8 | Sep 2 | Memory corruption in Bluetooth HOST due to stack-based buffer overflow when when extracting data using command length parameter in Snapdragon Connectivity, Snapdragon Mobile Affected: All versions, or not specified |
| CVE-2021-35081 | 9.8 | Jun 14 | Possible buffer overflow due to improper validation of SSID length received from beacon or probe response during an IBSS session in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1946 | 9.8 | Sep 9 | Null Pointer Dereference may occur due to improper validation while processing crafted SDP body in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2020-11291 | 9.8 | Jun 9 | Possible buffer overflow while updating ikev2 parameters for delete payloads received during informational exchange due to lack of check of input validation for certain parameters… Affected: All versions, or not specified |
| CVE-2020-11176 | 9.8 | Jun 9 | While processing server certificate from IPSec server, certificate validation for subject alternative name API can cause heap overflow which can lead to memory corruption in… Affected: All versions, or not specified |
| CVE-2021-1981 | 9.1 | Nov 12 | Possible buffer over read due to improper IE size check of Bearer capability IE in MT setup request from network in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2026-25277 | 8.8 | Jun 1 | Buffer Copy Without Checking Size of Input in Secure Processor Affected: All versions, or not specified |
| CVE-2026-25276 | 8.8 | Jun 1 | Improper Validation of Array Index in Secure Processor Affected: All versions, or not specified |
| CVE-2021-35123 | 8.8 | Jun 14 | Buffer copy in GATT multi notification due to improper length check for the data coming over-the-air in Snapdragon Connectivity, Snapdragon Industrial IOT Affected: All versions, or not specified |
| CVE-2024-33035 | 8.4 | Sep 2 | Integer Overflow or Wraparound in Display Affected: 0 |
| CVE-2021-1917 | 8.4 | Oct 20 | Null pointer dereference can occur due to memory allocation failure in DIAG in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1913 | 8.4 | Oct 20 | Possible integer overflow due to improper length check while updating grace period and count record in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2025-21488 | 8.2 | Sep 24 | Buffer Over-read in Data Network Stack & Connectivity Affected: All versions, or not specified |
| CVE-2024-23359 | 8.2 | Sep 2 | Buffer Over-read in Multi Mode Call Processor Affected: 0 |
| CVE-2020-11263 | 8.2 | Jan 3 | An integer overflow due to improper check performed after the address and size passed are aligned in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2022-33268 | 8.1 | Dec 13 | Information disclosure due to buffer over-read in Bluetooth HOST while pairing and connecting A2DP Affected: All versions, or not specified |
| CVE-2021-30347 | 8.1 | Jun 14 | Improper integrity check can lead to race condition between tasks PDCP and RRC? right after a valid RRC Command packet has been received in Snapdragon Auto, Snapdragon Compute,… Affected: All versions, or not specified |
| CVE-2025-59616 | 7.8 | Jul 6 | Use After Free in Computer Vision Affected: All versions, or not specified |
| CVE-2025-59615 | 7.8 | Jul 6 | Use After Free in Computer Vision Affected: All versions, or not specified |
| CVE-2026-25259 | 7.8 | Jun 1 | Out-of-bounds Write in DSP Service Affected: All versions, or not specified |
| CVE-2025-47408 | 7.8 | May 4 | Untrusted Pointer Dereference in Power Optimization Firmware Affected: All versions, or not specified |
| CVE-2025-47405 | 7.8 | May 4 | Untrusted Pointer Dereference in Camera Affected: All versions, or not specified |
| CVE-2025-59603 | 7.8 | Mar 2 | Out-of-bounds Write in Computer Vision Affected: All versions, or not specified |
| CVE-2025-47379 | 7.8 | Mar 2 | Use After Free in Automotive Audio Affected: All versions, or not specified |
| CVE-2025-47375 | 7.8 | Mar 2 | Use After Free in Automotive Audio Affected: All versions, or not specified |
| CVE-2025-47348 | 7.8 | Jan 6 | Use of Uninitialized Variable in HLOS Affected: All versions, or not specified |
| CVE-2025-27054 | 7.8 | Oct 9 | Out-of-bounds Write in Display Affected: All versions, or not specified |
| CVE-2025-27053 | 7.8 | Oct 9 | Incorrect Calculation of Buffer Size in HLOS Affected: All versions, or not specified |
| CVE-2025-27037 | 7.8 | Sep 24 | Use After Free in Camera Driver Affected: All versions, or not specified |
| CVE-2025-21474 | 7.8 | Aug 6 | Use After Free in BTHOST Affected: All versions, or not specified |
| CVE-2025-21455 | 7.8 | Aug 6 | Time-of-check Time-of-use (TOCTOU) Race Condition in Camera_Linux Affected: All versions, or not specified |
| CVE-2025-27061 | 7.8 | Jul 8 | Out-of-bounds Write in Video Affected: All versions, or not specified |
| CVE-2025-27043 | 7.8 | Jul 8 | Buffer Copy Without Checking Size of Input in Video Affected: All versions, or not specified |
| CVE-2024-53010 | 7.8 | Jun 3 | Improper Access Control in Core Affected: All versions, or not specified |
| CVE-2025-21467 | 7.8 | May 6 | Out-of-bounds Write in Computer Vision Affected: All versions, or not specified |
| CVE-2025-21453 | 7.8 | May 6 | Use After Free in GPS HLOS Driver Affected: All versions, or not specified |
| CVE-2024-49844 | 7.8 | May 6 | Improper Input Validation in Automotive Affected: All versions, or not specified |
| CVE-2024-49835 | 7.8 | May 6 | Out-of-bounds Write in SPS Applications Affected: All versions, or not specified |
| CVE-2024-45570 | 7.8 | May 6 | Use of Out-of-range Pointer Offset in Camera Driver Affected: All versions, or not specified |
