SF
Product
Sm6250 Firmware
by Qualcomm · last CVE Oct 6, 2026
On CISA KEVExploited in the wild
107
CVEs
2
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 6High 80Medium 21Low 0
Watch

Add Sm6250 Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-22069
7.8
0%
Sep 2
Devices with keyprotect off may store unencrypted keybox in RPMB and cause cryptographic issue in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
Affected: All versions, or not specified
CVE-2022-22059
7.8
0%
Sep 2
Memory corruption due to out of bound read while parsing a video file in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
Affected: All versions, or not specified
CVE-2021-35094
7.8
0%
Jun 14
Improper verification of timeout-based authentication in identity credential can lead to invalid authorization in HLOS in Snapdragon Auto, Snapdragon Compute, Snapdragon…
Affected: All versions, or not specified
CVE-2021-35102
7.8
0%
Jun 14
Possible buffer overflow due to lack of validation for the length of NAI string read from EFS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile
Affected: All versions, or not specified
CVE-2021-30311
7.8
0%
Jan 13
Possible heap overflow due to lack of index validation before allocating and writing to heap buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
Affected: All versions, or not specified
CVE-2021-30308
7.8
0%
Jan 13
Possible buffer overflow while printing the HARQ memory partition detail due to improper validation of buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
Affected: All versions, or not specified
CVE-2021-30336
7.8
0%
Jan 3
Possible out of bound read due to lack of domain input validation while processing APK close session request in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
Affected: All versions, or not specified
CVE-2021-30267
7.8
0%
Jan 3
Possible integer overflow to buffer overflow due to improper input validation in FTM ARA commands in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
Affected: All versions, or not specified
CVE-2021-30316
7.8
0%
Oct 20
Possible out of bound memory access due to improper boundary check while creating HSYNC fence in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon…
Affected: All versions, or not specified
CVE-2021-30257
7.8
0%
Oct 20
Possible out of bound read or write in VR service due to lack of validation of DSP selection values in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…
Affected: All versions, or not specified
CVE-2021-30256
7.8
0%
Oct 20
Possible stack overflow due to improper validation of camera name length before copying the name in VR Service in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…
Affected: All versions, or not specified
CVE-2021-1923
7.8
0%
Sep 8
Incorrect pointer argument passed to trusted application TA could result in un-intended memory operations in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
Affected: All versions, or not specified
CVE-2021-1940
7.8
0%
Jul 13
Use after free can occur due to improper handling of response from firmware in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon…
Affected: All versions, or not specified
CVE-2020-11306
7.8
0%
Jun 9
Possible integer overflow in RPMB counter due to lack of length check on user provided data in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…
Affected: All versions, or not specified
CVE-2020-3632
7.8
0%
Nov 12
u'Incorrect validation of ring context fetched from host memory can lead to memory overflow' in Snapdragon Compute, Snapdragon Mobile in QSM8350, SC7180, SDX55, SDX55M, SM6150,…
Affected: All versions, or not specified
CVE-2020-11207
7.8
1%
Nov 12
Buffer overflow in LibFastCV library due to improper size checks with respect to buffer length' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon…
Affected: All versions, or not specified
CVE-2020-11206
7.8
2%
Nov 12
Possible buffer overflow in Fastrpc while handling received parameters due to lack of validation on input parameters' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer…
Affected: All versions, or not specified
CVE-2020-11202
7.8
2%
Nov 12
Buffer overflow/underflow occurs when typecasting the buffer passed by CPU internally in the library which is not aligned with the actual size of the structure' in Snapdragon…
Affected: All versions, or not specified
CVE-2020-11201
7.8
2%
Nov 12
Arbitrary access to DSP memory due to improper check in loaded library for data received from CPU side' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon…
Affected: All versions, or not specified
CVE-2020-11130
7.8
0%
Nov 12
u'Possible buffer overflow in WIFI hal process due to copying data without checking the buffer length' in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT,…
Affected: All versions, or not specified
CVE-2020-11127
7.8
0%
Nov 12
u'Integer overflow can cause a buffer overflow due to lack of table length check in the extensible boot Loader during the validation of security metadata while processing objects…
Affected: All versions, or not specified
CVE-2020-11121
7.8
0%
Nov 12
u'Possible buffer overflow in WIFI hal process due to usage of memcpy without checking length of destination buffer' in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial…
Affected: All versions, or not specified
CVE-2025-21454
7.5
0%
Jul 8
Buffer Over-read in WLAN Embedded SW
Affected: All versions, or not specified
CVE-2025-21429
7.5
0%
Apr 7
Buffer Over-read in WLAN Host
Affected: All versions, or not specified
CVE-2023-43555
7.5
0%
Jun 3
Buffer Over-read in Video
Affected: All versions, or not specified
CVE-2023-21669
7.5
0%
Jun 6
Buffer Over-read in WLAN HOST
Affected: 0
CVE-2021-30301
7.5
1%
Jan 13
Possible denial of service due to out of memory while processing RRC and NAS OTA message in Snapdragon Auto, Snapdragon Industrial IOT, Snapdragon Mobile
Affected: All versions, or not specified
CVE-2021-30287
7.5
1%
Jan 13
Possible assertion due to improper validation of symbols configured for PDCCH monitoring in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial…
Affected: All versions, or not specified
CVE-2021-30273
7.5
1%
Jan 3
Possible assertion due to improper handling of IPV6 packet with invalid length in destination options header in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT,…
Affected: All versions, or not specified
CVE-2021-1982
7.5
1%
Nov 12
Possible denial of service scenario due to improper input validation of received NAS OTA message in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
Affected: All versions, or not specified
CVE-2025-47383
7.2
0%
Mar 2
Missing Cryptographic Step in Data Modem
Affected: All versions, or not specified
CVE-2026-24075
7.0
0%
Sep 17
Buffer Over-read in Qualcomm IPC
Affected: All versions, or not specified
CVE-2025-27076
7.0
0%
Aug 6
Time-of-check Time-of-use (TOCTOU) Race Condition in Display
Affected: All versions, or not specified
CVE-2024-38407
7.0
0%
Nov 4
Time-of-check Time-of-use (TOCTOU) Race Condition in Camera
Affected: 0
CVE-2024-38406
7.0
0%
Nov 4
Time-of-check Time-of-use (TOCTOU) Race Condition in Camera
Affected: 0
CVE-2022-25696
7.0
0%
Sep 16
Memory corruption in display due to time-of-check time-of-use race condition during map or unmap in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
Affected: All versions, or not specified
CVE-2021-35113
6.8
0%
Sep 2
Possible authentication bypass due to improper order of signature verification and hashing in the signature verification call in Snapdragon Auto, Snapdragon Compute, Snapdragon…
Affected: All versions, or not specified
CVE-2026-24076
6.7
0%
Aug 4
Buffer Copy Without Checking Size of Input in Bluetooth HOST
Affected: All versions, or not specified
CVE-2025-59611
6.7
0%
Jun 1
Out-of-bounds Write in Core Services
Affected: All versions, or not specified
CVE-2024-53015
6.6
0%
Jun 3
Use After Free in Computer Vision
Affected: All versions, or not specified
CVE-2025-47371
6.5
0%
Mar 2
Reachable Assertion in Modem
Affected: All versions, or not specified
CVE-2021-30343
5.9
0%
Jun 14
Improper integrity check can lead to race condition between tasks PDCP and RRC? after a valid RRC Command packet has been received in Snapdragon Auto, Snapdragon Compute,…
Affected: All versions, or not specified
CVE-2025-21433
5.5
0%
Jul 8
NULL Pointer Dereference in SPS-HLOS
Affected: All versions, or not specified
CVE-2023-28568
5.5
0%
Nov 7
Buffer Over-read in WLAN HAL
Affected: All versions, or not specified
CVE-2023-28566
5.5
0%
Nov 7
Buffer Over-read in WLAN HAL
Affected: All versions, or not specified
CVE-2022-40533
5.5
0%
Jun 6
Untrusted Pointer Dereference in Core
Affected: All versions, or not specified
CVE-2022-25679
5.5
0%
Nov 15
Denial of service in video due to improper access control in broadcast receivers in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile,…
Affected: All versions, or not specified
CVE-2022-25663
5.5
0%
Oct 12
Possible buffer overflow due to lack of buffer length check during management frame Rx handling lead to denial of service in Snapdragon Compute, Snapdragon Connectivity,…
Affected: All versions, or not specified
CVE-2022-25653
5.5
0%
Sep 16
Information disclosure in video due to buffer over-read while processing avi file in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial…
Affected: All versions, or not specified
CVE-2021-30331
5.5
0%
Apr 1
Possible buffer overflow due to improper data validation of external commands sent via DIAG interface in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
Affected: All versions, or not specified
Page 2 of 3 · 107 total