[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fvbjrgY-YtqbH06UK4vaa4wut1rfQ63KEfeMariWtrbg":3,"g5a-family:qualcomm\u002Fsm6250_firmware":135,"g5a-ex:qualcomm\u002Fsm6250_firmware@*":136},{"success":4,"data":5},true,{"product":6,"versions":15,"topVulnerabilitiesByEpss":16,"kevVulnerabilities":71,"seoMetadata":113,"meta":132},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":14},"qualcomm","sm6250_firmware",0,482,7,"2026-04-06",[],"Sm6250 Firmware by Qualcomm is a technology product and 482 known security vulnerabilities including 7 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[],[17,26,32,37,42,48,52,57,63,67],{"cveId":18,"description":19,"publishedDate":20,"cvssScore":21,"cvssVersion":22,"severity":23,"isKev":24,"epssScore":25},"CVE-2020-11264","Improper authentication of Non-EAPOL\u002FWAPI plaintext frames during four-way handshake can lead to arbitrary network packet injection in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music","2021-09-08",9.8,"v3.1","Critical",false,0.13186,{"cveId":27,"description":28,"publishedDate":20,"cvssScore":29,"cvssVersion":22,"severity":30,"isKev":24,"epssScore":31},"CVE-2020-11301","Improper authentication of un-encrypted plaintext Wi-Fi frames in an encrypted network can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking",7.5,"High",0.11108,{"cveId":33,"description":34,"publishedDate":35,"cvssScore":21,"cvssVersion":22,"severity":23,"isKev":24,"epssScore":36},"CVE-2021-30351","An out of bound memory access can occur due to improper validation of number of frames being passed during music playback in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking","2022-01-03",0.04018,{"cveId":38,"description":39,"publishedDate":40,"cvssScore":21,"cvssVersion":22,"severity":23,"isKev":24,"epssScore":41},"CVE-2021-1965","Possible buffer overflow due to lack of parameter length check during MBSSID scan IE parse in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking","2021-07-13",0.03016,{"cveId":43,"description":44,"publishedDate":45,"cvssScore":46,"cvssVersion":22,"severity":30,"isKev":24,"epssScore":47},"CVE-2020-11206","Possible buffer overflow in Fastrpc while handling received parameters due to lack of validation on input parameters' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in APQ8098, MSM8998, QCM4290, QCM6125, QCS410, QCS4290, QCS610, QCS6125, QSM8250, QSM8350, SA6145P, SA6150P, SA6155, SA6155P, SA8150P, SA8155, SA8155P, SA8195P, SC7180, SDA640, SDA660, SDA845, SDA855, SDM640, SDM660, SDM830, SDM845, SDM850, SDX50M, SDX55, SDX55M, SM4250, SM4250P, SM6115, SM6115P, SM6125, SM6150, SM6150P, SM6250, SM6250P, SM6350, SM7125, SM7150, SM7150P, SM7225, SM7250, SM7250P, SM8150, SM8150P, SM8250, SM8350, SM8350P, SXR2130, SXR2130P","2020-11-12",7.8,0.01819,{"cveId":49,"description":50,"publishedDate":45,"cvssScore":46,"cvssVersion":22,"severity":30,"isKev":24,"epssScore":51},"CVE-2020-11201","Arbitrary access to DSP memory due to improper check in loaded library for data received from CPU side' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in QCM6125, QCS410, QCS603, QCS605, QCS610, QCS6125, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SDA640, SDA845, SDM640, SDM830, SDM845, SDX50M, SDX55, SDX55M, SM6125, SM6150, SM6250, SM6250P, SM7125, SM7150, SM7150P, SM8150, SM8150P",0.01804,{"cveId":53,"description":54,"publishedDate":55,"cvssScore":46,"cvssVersion":22,"severity":30,"isKev":4,"epssScore":56},"CVE-2020-11261","Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables","2021-06-09",0.01604,{"cveId":58,"description":59,"publishedDate":60,"cvssScore":61,"cvssVersion":22,"severity":30,"isKev":4,"epssScore":62},"CVE-2021-1905","Possible use after free due to improper handling of memory mapping of multiple processes simultaneously. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables","2021-05-07",8.4,0.01543,{"cveId":64,"description":65,"publishedDate":45,"cvssScore":46,"cvssVersion":22,"severity":30,"isKev":24,"epssScore":66},"CVE-2020-11202","Buffer overflow\u002Funderflow occurs when typecasting the buffer passed by CPU internally in the library which is not aligned with the actual size of the structure' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in QCM6125, QCS410, QCS603, QCS605, QCS610, QCS6125, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SDA640, SDA670, SDA845, SDM640, SDM670, SDM710, SDM830, SDM845, SDX50M, SDX55, SDX55M, SM6125, SM6150, SM6150P, SM6250, SM6250P, SM7125, SM7150, SM7150P, SM8150, SM8150P",0.0154,{"cveId":68,"description":69,"publishedDate":45,"cvssScore":46,"cvssVersion":22,"severity":30,"isKev":24,"epssScore":70},"CVE-2020-11207","Buffer overflow in LibFastCV library due to improper size checks with respect to buffer length' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in APQ8052, APQ8056, APQ8076, APQ8096, APQ8096SG, APQ8098, MDM9655, MSM8952, MSM8956, MSM8976, MSM8976SG, MSM8996, MSM8996SG, MSM8998, QCM4290, QCM6125, QCS410, QCS4290, QCS610, QCS6125, QSM8250, SA6145P, SA6150P, SA6155, SA6155P, SA8150P, SA8155, SA8155P, SA8195P, SC7180, SDA640, SDA660, SDA845, SDA855, SDM640, SDM660, SDM830, SDM845, SDM850, SDX50M, SDX55, SDX55M, SM4250, SM4250P, SM6115, SM6115P, SM6125, SM6150, SM6150P, SM6250, SM6250P, SM6350, SM7125, SM7150, SM7150P, SM7225, SM7250, SM7250P, SM8150, SM8150P, SM8250, SXR2130, SXR2130P",0.01472,[72,81,84,92,98,102,105],{"cveId":73,"description":74,"publishedDate":75,"cvssScore":76,"severity":30,"isKev":4,"epssScore":77,"cisaVulnName":78,"cisaDateAdded":75,"cisaShortDescription":79,"cisaRequiredAction":80},"CVE-2025-21479","Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.","2025-06-03",8.6,0.00843,"Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability","Multiple Qualcomm chipsets contain an incorrect authorization vulnerability. This vulnerability allows for memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"cveId":82,"description":74,"publishedDate":75,"cvssScore":76,"severity":30,"isKev":4,"epssScore":83,"cisaVulnName":78,"cisaDateAdded":75,"cisaShortDescription":79,"cisaRequiredAction":80},"CVE-2025-21480",0.0046,{"cveId":85,"description":86,"publishedDate":87,"cvssScore":46,"severity":30,"isKev":4,"epssScore":88,"cisaVulnName":89,"cisaDateAdded":87,"cisaShortDescription":90,"cisaRequiredAction":91},"CVE-2023-33063","Memory corruption in DSP Services during a remote call from HLOS to DSP.","2023-12-05",0.00672,"Qualcomm Multiple Chipsets Use-After-Free Vulnerability","Multiple Qualcomm chipsets contain a use-after-free vulnerability due to memory corruption in DSP Services during a remote call from HLOS to DSP.","Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.",{"cveId":93,"description":94,"publishedDate":87,"cvssScore":61,"severity":30,"isKev":4,"epssScore":95,"cisaVulnName":96,"cisaDateAdded":87,"cisaShortDescription":97,"cisaRequiredAction":91},"CVE-2023-33107","Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.",0.00739,"Qualcomm Multiple Chipsets Integer Overflow Vulnerability","Multiple Qualcomm chipsets contain an integer overflow vulnerability due to memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.",{"cveId":53,"description":54,"publishedDate":55,"cvssScore":46,"severity":30,"isKev":4,"epssScore":56,"cisaVulnName":99,"cisaDateAdded":100,"cisaShortDescription":54,"cisaRequiredAction":101},"Qualcomm Multiple Chipsets Improper Input Validation Vulnerability","2021-12-01","Apply updates per vendor instructions.",{"cveId":58,"description":59,"publishedDate":60,"cvssScore":61,"severity":30,"isKev":4,"epssScore":62,"cisaVulnName":89,"cisaDateAdded":103,"cisaShortDescription":104,"cisaRequiredAction":101},"2021-11-03","Multiple Qualcomm Chipsets contain a use after free vulnerability due to improper handling of memory mapping of multiple processes simultaneously.",{"cveId":106,"description":107,"publishedDate":60,"cvssScore":108,"severity":109,"isKev":4,"epssScore":110,"cisaVulnName":111,"cisaDateAdded":103,"cisaShortDescription":112,"cisaRequiredAction":101},"CVE-2021-1906","Improper handling of address deregistration on failure can lead to new GPU address allocation failure. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables",6.2,"Medium",0.0052,"Qualcomm Multiple Chipsets Detection of Error Condition Without Action Vulnerability","Multiple Qualcomm chipsets contain a detection of error condition without action vulnerability when improper handling of address deregistration on failure can lead to new GPU address allocation failure.",{"title":114,"metaDescription":115,"keywords":116,"structuredData":117},"Sm6250 Firmware by Qualcomm - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Sm6250 Firmware by Qualcomm with 482 tracked vulnerabilities including 0 critical and 6 high-severity issues and 7 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Sm6250 Firmware vulnerabilities, Sm6250 Firmware security, Sm6250 Firmware CVE, Qualcomm Sm6250 Firmware, Sm6250 Firmware threat intelligence, Qualcomm security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Sm6250 Firmware KEV, Sm6250 Firmware exploited vulnerabilities",{"@context":118,"@type":119,"name":120,"description":115,"url":121,"manufacturer":122,"applicationCategory":126,"softwareVersion":127,"mainEntity":128},"https:\u002F\u002Fschema.org","SoftwareApplication","Sm6250 Firmware","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fqualcomm\u002Fsm6250_firmware",{"@type":123,"name":124,"url":125},"Organization","Qualcomm","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fqualcomm","Security Software","Multiple versions",{"@type":129,"name":130,"description":131,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Sm6250 Firmware Security Vulnerabilities","Security vulnerabilities affecting Sm6250 Firmware by Qualcomm",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":133,"apiVersion":134},"2026-10-17T19:18:02.474Z","3.0",[],{"rows":137,"total":11,"capped":24,"failed":9},[138,142,146,150,154,158,162],{"cveId":73,"name":78,"severity":30,"cvss":76,"added":75,"epss":77,"published":139,"ranges":140,"checked":4,"hits":141,"covers":24},"2025-06-03T07:15:20.933",[],[],{"cveId":82,"name":78,"severity":30,"cvss":76,"added":75,"epss":83,"published":143,"ranges":144,"checked":4,"hits":145,"covers":24},"2025-06-03T06:15:26.19",[],[],{"cveId":85,"name":89,"severity":30,"cvss":46,"added":87,"epss":88,"published":147,"ranges":148,"checked":4,"hits":149,"covers":24},"2023-12-05T03:15:12.067",[],[],{"cveId":93,"name":96,"severity":30,"cvss":61,"added":87,"epss":95,"published":151,"ranges":152,"checked":4,"hits":153,"covers":24},"2023-12-05T03:15:14.86",[],[],{"cveId":53,"name":99,"severity":30,"cvss":46,"added":100,"epss":56,"published":155,"ranges":156,"checked":4,"hits":157,"covers":24},"2021-06-09T05:15:07.643",[],[],{"cveId":58,"name":89,"severity":30,"cvss":61,"added":103,"epss":62,"published":159,"ranges":160,"checked":4,"hits":161,"covers":24},"2021-05-07T09:15:08.243",[],[],{"cveId":106,"name":111,"severity":109,"cvss":108,"added":103,"epss":110,"published":163,"ranges":164,"checked":4,"hits":165,"covers":24},"2021-05-07T09:15:08.28",[],[]]