Sd821 Firmware

CVEs (102)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2020-11276	Qualcomm Snapdragon	Cri	0.59	9.1	0.01	Feb 22, 2021	Possible buffer over read while processing P2P IE and NOA attribute of beacon and probe response frames due to improper validation of P2P IE and NOA attribute lengths in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity,…
CVE-2025-27074	Qualcomm GP command response	Hig	0.57	8.8	0.00	Nov 4, 2025	Memory corruption while processing a GP command response.
CVE-2020-11269	Qualcomm Snapdragon	Hig	0.57	8.8	0.00	Feb 22, 2021	Possible memory corruption while processing EAPOL frames due to lack of validation of key length before using it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…
CVE-2020-11177	Qualcomm Snapdragon	Hig	0.57	8.8	0.00	Feb 22, 2021	User can overwrite Security Code NV item without knowing current SPC due to improper validation of SPC code setting and device lock in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon…
CVE-2020-11303	Qualcomm Snapdragon	Hig	0.56	8.6	0.01	Oct 20, 2021	Accepting AMSDU frames with mismatched destination and source address can lead to information disclosure in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon…
CVE-2016-10408	Qualcomm QSEE	Hig	0.55	8.4	0.00	Nov 26, 2024	QSEE will randomly experience a fatal error during execution due to speculative instruction fetches from device memory. Device memory is not valid executable memory.
CVE-2024-21461	Qualcomm Keymaster	Hig	0.55	8.4	0.00	Jul 1, 2024	Memory corruption while performing finish HMAC operation when context is freed by keymaster.
CVE-2024-21468	Qualcomm GPU	Hig	0.55	8.4	0.00	Apr 1, 2024	Memory corruption when there is failed unmap operation in GPU.
CVE-2023-33023	Qualcomm Fastconnect 6900 Firmware	Hig	0.55	8.4	0.00	Apr 1, 2024	Memory corruption while processing finish_sign command to pass a rsp buffer.
CVE-2023-28547	Qualcomm SPS Application	Hig	0.55	8.4	0.00	Apr 1, 2024	Memory corruption in SPS Application while requesting for public key in sorter TA.
CVE-2023-22667	Qualcomm Audio	Hig	0.55	8.4	0.00	Jul 4, 2023	Memory Corruption in Audio while allocating the ion buffer during the music playback.
CVE-2023-21628	Qualcomm WLAN HAL	Hig	0.55	8.4	0.00	Jun 6, 2023	Memory corruption in WLAN HAL while processing WMI-UTF command or FTM TLV1 command.
CVE-2022-40531	Qualcomm WLAN	Hig	0.55	8.4	0.00	Mar 10, 2023	Memory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID message.
CVE-2022-25709	Qualcomm Modem	Hig	0.55	8.4	0.00	Mar 10, 2023	Memory corruption in modem due to use of out of range pointer offset while processing qmi msg
CVE-2022-25694	Qualcomm Modem	Hig	0.55	8.4	0.00	Mar 10, 2023	Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM
CVE-2022-25695	Qualcomm Snapdragon	Hig	0.55	8.4	0.00	Dec 13, 2022	Memory corruption in MODEM due to Improper Validation of Array Index while processing GSTK Proactive commands in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice…
CVE-2022-25682	Qualcomm Snapdragon	Hig	0.55	8.4	0.00	Dec 13, 2022	Memory corruption in MODEM UIM due to usage of out of range pointer offset while decoding command from card in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music,…
CVE-2022-25743	Qualcomm Snapdragon	Hig	0.55	8.4	0.00	Nov 15, 2022	Memory corruption in graphics due to use-after-free while importing graphics buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2022-25724	Qualcomm Snapdragon	Hig	0.55	8.4	0.00	Nov 15, 2022	Memory corruption in graphics due to buffer overflow while validating the user address in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2021-30261	Qualcomm Snapdragon Mobile	Hig	0.55	8.4	0.00	Sep 17, 2021	Possible integer and heap overflow due to lack of input command size validation while handling beacon template update command from HLOS in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon…

CVE-2020-11276CriFeb 22, 2021
Qualcomm
Snapdragon
risk 0.59cvss 9.1epss 0.01
Possible buffer over read while processing P2P IE and NOA attribute of beacon and probe response frames due to improper validation of P2P IE and NOA attribute lengths in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity,…
CVE-2025-27074HigNov 4, 2025
Qualcomm
GP command response
risk 0.57cvss 8.8epss 0.00
Memory corruption while processing a GP command response.
CVE-2020-11269HigFeb 22, 2021
Qualcomm
Snapdragon
risk 0.57cvss 8.8epss 0.00
Possible memory corruption while processing EAPOL frames due to lack of validation of key length before using it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…
CVE-2020-11177HigFeb 22, 2021
Qualcomm
Snapdragon
risk 0.57cvss 8.8epss 0.00
User can overwrite Security Code NV item without knowing current SPC due to improper validation of SPC code setting and device lock in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon…
CVE-2020-11303HigOct 20, 2021
Qualcomm
Snapdragon
risk 0.56cvss 8.6epss 0.01
Accepting AMSDU frames with mismatched destination and source address can lead to information disclosure in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon…
CVE-2016-10408HigNov 26, 2024
Qualcomm
QSEE
risk 0.55cvss 8.4epss 0.00
QSEE will randomly experience a fatal error during execution due to speculative instruction fetches from device memory. Device memory is not valid executable memory.
CVE-2024-21461HigJul 1, 2024
Qualcomm
Keymaster
risk 0.55cvss 8.4epss 0.00
Memory corruption while performing finish HMAC operation when context is freed by keymaster.
CVE-2024-21468HigApr 1, 2024
Qualcomm
GPU
risk 0.55cvss 8.4epss 0.00
Memory corruption when there is failed unmap operation in GPU.
CVE-2023-33023HigApr 1, 2024
Qualcomm
Fastconnect 6900 Firmware
risk 0.55cvss 8.4epss 0.00
Memory corruption while processing finish_sign command to pass a rsp buffer.
CVE-2023-28547HigApr 1, 2024
Qualcomm
SPS Application
risk 0.55cvss 8.4epss 0.00
Memory corruption in SPS Application while requesting for public key in sorter TA.
CVE-2023-22667HigJul 4, 2023
Qualcomm
Audio
risk 0.55cvss 8.4epss 0.00
Memory Corruption in Audio while allocating the ion buffer during the music playback.
CVE-2023-21628HigJun 6, 2023
Qualcomm
WLAN HAL
risk 0.55cvss 8.4epss 0.00
Memory corruption in WLAN HAL while processing WMI-UTF command or FTM TLV1 command.
CVE-2022-40531HigMar 10, 2023
Qualcomm
WLAN
risk 0.55cvss 8.4epss 0.00
Memory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID message.
CVE-2022-25709HigMar 10, 2023
Qualcomm
Modem
risk 0.55cvss 8.4epss 0.00
Memory corruption in modem due to use of out of range pointer offset while processing qmi msg
CVE-2022-25694HigMar 10, 2023
Qualcomm
Modem
risk 0.55cvss 8.4epss 0.00
Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM
CVE-2022-25695HigDec 13, 2022
Qualcomm
Snapdragon
risk 0.55cvss 8.4epss 0.00
Memory corruption in MODEM due to Improper Validation of Array Index while processing GSTK Proactive commands in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice…
CVE-2022-25682HigDec 13, 2022
Qualcomm
Snapdragon
risk 0.55cvss 8.4epss 0.00
Memory corruption in MODEM UIM due to usage of out of range pointer offset while decoding command from card in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music,…
CVE-2022-25743HigNov 15, 2022
Qualcomm
Snapdragon
risk 0.55cvss 8.4epss 0.00
Memory corruption in graphics due to use-after-free while importing graphics buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2022-25724HigNov 15, 2022
Qualcomm
Snapdragon
risk 0.55cvss 8.4epss 0.00
Memory corruption in graphics due to buffer overflow while validating the user address in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2021-30261HigSep 17, 2021
Qualcomm
Snapdragon Mobile
risk 0.55cvss 8.4epss 0.00
Possible integer and heap overflow due to lack of input command size validation while handling beacon template update command from HLOS in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon…

Page 2 of 6