SF
Product
Sm6250 Firmware
On CISA KEVExploited in the wild
107
CVEs
2
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 6High 80Medium 21Low 0
Watch
Add Sm6250 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-21479 In wildKEV | 8.6 | Jun 3 | Incorrect Authorization in Graphics Affected: All versions, or not specified |
| CVE-2025-21480 In wildKEV | 8.6 | Jun 3 | Incorrect Authorization in Graphics Windows Affected: All versions, or not specified |
| CVE-2021-1932 | 8.4 | Oct 20 | Improper access control in trusted application environment can cause unauthorized access to CDSP or ADSP VM memory with either privilege in Snapdragon Auto, Snapdragon Compute,… Affected: All versions, or not specified |
| CVE-2025-21427 | 8.2 | Jul 8 | Buffer Over-read in Data HLOS - LNX Affected: All versions, or not specified |
| CVE-2020-11263 | 8.2 | Jan 3 | An integer overflow due to improper check performed after the address and size passed are aligned in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2021-30347 | 8.1 | Jun 14 | Improper integrity check can lead to race condition between tasks PDCP and RRC? right after a valid RRC Command packet has been received in Snapdragon Auto, Snapdragon Compute,… Affected: All versions, or not specified |
| CVE-2026-25267 | 7.8 | Oct 6 | Missing Authorization in Core Affected: All versions, or not specified |
| CVE-2026-24074 | 7.8 | Sep 17 | Out-of-bounds Write in Video Affected: All versions, or not specified |
| CVE-2025-47408 | 7.8 | May 4 | Untrusted Pointer Dereference in Power Optimization Firmware Affected: All versions, or not specified |
| CVE-2026-21378 | 7.8 | Apr 6 | Buffer Over-read in Camera Affected: All versions, or not specified |
| CVE-2026-21376 | 7.8 | Apr 6 | Buffer Over-read in Camera Affected: All versions, or not specified |
| CVE-2026-21374 | 7.8 | Apr 6 | Buffer Over-read in Camera Affected: All versions, or not specified |
| CVE-2026-21373 | 7.8 | Apr 6 | Buffer Over-read in Camera Affected: All versions, or not specified |
| CVE-2026-21371 | 7.8 | Apr 6 | Buffer Over-read in WinBlast Driver Affected: All versions, or not specified |
| CVE-2025-47387 | 7.8 | Dec 18 | Untrusted Pointer Dereference in Camera Affected: All versions, or not specified |
| CVE-2025-27054 | 7.8 | Oct 9 | Out-of-bounds Write in Display Affected: All versions, or not specified |
| CVE-2025-27068 | 7.8 | Aug 6 | Buffer Over-read in Camera Affected: All versions, or not specified |
| CVE-2025-27061 | 7.8 | Jul 8 | Out-of-bounds Write in Video Affected: All versions, or not specified |
| CVE-2025-27055 | 7.8 | Jul 8 | Buffer Over-read in Camera Affected: All versions, or not specified |
| CVE-2025-27050 | 7.8 | Jul 8 | Use After Free in Camera Affected: All versions, or not specified |
| CVE-2025-27046 | 7.8 | Jul 8 | Double Free in Display Affected: All versions, or not specified |
| CVE-2025-21466 | 7.8 | Jul 8 | Use After Free in Display Affected: All versions, or not specified |
| CVE-2025-21475 | 7.8 | May 6 | Buffer Over-read in Display Affected: All versions, or not specified |
| CVE-2025-21453 | 7.8 | May 6 | Use After Free in GPS HLOS Driver Affected: All versions, or not specified |
| CVE-2024-49835 | 7.8 | May 6 | Out-of-bounds Write in SPS Applications Affected: All versions, or not specified |
| CVE-2025-21441 | 7.8 | Apr 7 | Out-of-bounds Read in Windows WLAN Host Affected: All versions, or not specified |
| CVE-2025-21440 | 7.8 | Apr 7 | Out-of-bounds Read in Windows WLAN Host Affected: All versions, or not specified |
| CVE-2025-21438 | 7.8 | Apr 7 | Out-of-bounds Read in Windows WLAN Host Affected: All versions, or not specified |
| CVE-2025-21423 | 7.8 | Apr 7 | Improper Validation of Array Index in Display Affected: All versions, or not specified |
| CVE-2025-21421 | 7.8 | Apr 7 | Buffer Over-read in Display Affected: All versions, or not specified |
| CVE-2025-21424 | 7.8 | Mar 3 | Use After Free in NPU Affected: All versions, or not specified |
| CVE-2024-45542 | 7.8 | Jan 6 | Stack-based Buffer Overflow in WLAN Windows Host Affected: All versions, or not specified |
| CVE-2024-45541 | 7.8 | Jan 6 | Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Windows Host Affected: All versions, or not specified |
| CVE-2024-33065 | 7.8 | Oct 7 | Improper Input Validation in Camera Affected: 0 |
| CVE-2024-33027 | 7.8 | Aug 5 | Improper Access Control in Graphics Linux Affected: 0 |
| CVE-2024-21470 | 7.8 | Apr 1 | Integer Overflow to Buffer Overflow in Graphics Windows Affected: 0 |
| CVE-2023-43541 | 7.8 | Mar 4 | NULL Pointer Dereference in Windows Graphics Affected: 0 |
| CVE-2023-43540 | 7.8 | Mar 4 | Buffer Copy Without Checking Size of Input in Bluetooth HOST Affected: 0 |
| CVE-2023-33114 | 7.8 | Jan 2 | Use after free in Neural Processing Unit Affected: All versions, or not specified |
| CVE-2023-33092 | 7.8 | Dec 5 | Buffer Copy Without Checking Size of Input in Bluetooth HOST Affected: All versions, or not specified |
| CVE-2023-21633 | 7.8 | Jul 4 | Improper Restriction of Operations within the Bounds of a Memory Buffer in Linux Affected: 0 |
| CVE-2022-33298 | 7.8 | Apr 4 | Use after free in Modem Affected: 0 |
| CVE-2022-33296 | 7.8 | Apr 4 | Integer overflow to buffer overflow in Modem Affected: All versions, or not specified |
| CVE-2022-25709 | 7.8 | Mar 7 | Use of Out-of-range Pointer Offset in Data Modem Affected: All versions, or not specified |
| CVE-2022-22069 | 7.8 | Sep 2 | Devices with keyprotect off may store unencrypted keybox in RPMB and cause cryptographic issue in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2022-22059 | 7.8 | Sep 2 | Memory corruption due to out of bound read while parsing a video file in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile Affected: All versions, or not specified |
| CVE-2021-35094 | 7.8 | Jun 14 | Improper verification of timeout-based authentication in identity credential can lead to invalid authorization in HLOS in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-35102 | 7.8 | Jun 14 | Possible buffer overflow due to lack of validation for the length of NAI string read from EFS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile Affected: All versions, or not specified |
| CVE-2021-30311 | 7.8 | Jan 13 | Possible heap overflow due to lack of index validation before allocating and writing to heap buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-30308 | 7.8 | Jan 13 | Possible buffer overflow while printing the HARQ memory partition detail due to improper validation of buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
