Product by Qualcomm
Sm7675 Firmware
141 known vulnerabilities in Sm7675 Firmware (Qualcomm), 3 of them actively exploited (CISA KEV).
Key figures
141
Vulnerabilities
3
Actively exploited (KEV)
0
Used by ransomware
9
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-21385 | Integer Overflow or Wraparound in Graphics In CISA KEValso in 231 other products | 7.8 | |
| Critical | CVE-2025-21479 | Incorrect Authorization in Graphics In CISA KEValso in 74 other products | 8.6 | |
| Critical | CVE-2025-21480 | Incorrect Authorization in Graphics Windows In CISA KEValso in 75 other products | 8.6 | |
| Critical | CVE-2024-45569 | Improper Validation of Array Index in WLAN Host Communication | 9.8 | |
| High | CVE-2026-25275 | Buffer Over-read in WLAN Firmware | 7.5 | |
| Critical | CVE-2026-25289 | Stack-based Buffer Overflow in WLAN Firmware | 9.6 | |
| Critical | CVE-2025-21483 | Qualcomm Snapdragon: Improper Restriction of Operations within the Bounds of a Memory Buffer | 9.8 | |
| Critical | CVE-2025-27034 | Improper Validation of Array Index in Multi-Mode Call Processor | 9.8 | |
| High | CVE-2026-57554 | Use After Free in DSP Service | 7.8 | |
| High | CVE-2026-57545 | Untrusted Pointer Dereference in Graphics | 7.8 | |
| High | CVE-2026-25302 | Improper Verification of Cryptographic Signature in Boot | 7.1 | |
| High | CVE-2026-25294 | Buffer Over-read in WLAN Firmware | 7.4 | |
| High | CVE-2026-24081 | Buffer Over-read in BT Controller | 7.4 | |
| High | CVE-2026-24079 | Missing Authentication for Critical Function in Data Modem | 8.1 | |
| Medium | CVE-2026-25272 | Out-of-bounds Write in Camera Driver | 6.7 | |
| Medium | CVE-2026-25270 | Out-of-bounds Write in Camera Driver | 6.7 | |
| Medium | CVE-2026-25269 | Out-of-bounds Write in Camera Driver | 6.7 | |
| High | CVE-2026-24084 | Insecure Security Identifier Mechanism in Multi-Mode Call Processor | 7.5 | |
| High | CVE-2025-47392 | Integer Overflow or Wraparound in GPS | 8.8 | |
| Critical | CVE-2025-21450 | Improper Authentication in GPS_GNSS | 9.1 | |
| High | CVE-2026-24088 | Missing Authentication for Critical Function in Boot | 8.2 | |
| High | CVE-2025-59604 | NULL Pointer Dereference in SPS Applications | 7.8 | |
| High | CVE-2026-24082 | Use After Free in Automotive GPU | 7.8 | |
| High | CVE-2025-47345 | Reusing a Nonce, Key Pair in Encryption in Automotive Platform | 8.4 | |
| Medium | CVE-2026-24078 | Exposure of Private Personal Information to an Unauthorized Actor in Data Modem | 6.5 |
News
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 31sans-atrisk-mail,