SF
Product
Sa6155p Firmware
On CISA KEVExploited in the wild
489
CVEs
2
On KEV
9.8
Max CVSS
2
New 30D
Severity mix
Critical 64High 340Medium 85Low 0
Watch
Add Sa6155p Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-14017 | 9.8 | Jan 21 | Heap buffer overflow can occur while parsing invalid MKV clip which is not standard and have invalid vorbis codec data in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2019-14016 | 9.8 | Jan 21 | Integer overflow occurs while playing the clip which is nonstandard in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial… Affected: All versions, or not specified |
| CVE-2019-14013 | 9.8 | Jan 21 | While parsing invalid super index table, elements within super index table may exceed total chunk size and invalid data is read into the table in Snapdragon Auto, Snapdragon… Affected: All versions, or not specified |
| CVE-2019-14006 | 9.8 | Jan 21 | Buffer overflow occur while playing the clip which is nonstandard due to lack of offset length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2019-14005 | 9.8 | Jan 21 | Buffer overflow occur while playing the clip which is nonstandard due to lack of check of size duration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2019-14004 | 9.8 | Jan 21 | Buffer overflow occurs while processing invalid MKV clip, which has invalid EBML size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2019-10611 | 9.8 | Jan 21 | Buffer overflow can occur while processing clip due to lack of check of object size before parsing in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2019-10581 | 9.8 | Jan 21 | NULL is assigned to local instance of audio device pointer after free instead of global static pointer and can lead to use after free issue in Snapdragon Auto, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2019-10614 | 9.8 | Dec 18 | Out of boundary access is possible as there is no validation of data accessed against the received size of the packet in case of malicious firmware in Snapdragon Auto, Snapdragon… Affected: All versions, or not specified |
| CVE-2019-10572 | 9.8 | Dec 18 | Improper check in video driver while processing data from video firmware can lead to integer overflow and then buffer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-35117 | 9.1 | Apr 1 | An Out of Bounds read may potentially occur while processing an IBSS beacon, in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1977 | 9.1 | Oct 20 | Possible buffer over read due to improper validation of frame length while processing AEAD decryption during ASSOC response in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2020-11169 | 9.1 | Nov 2 | u'Buffer over-read while processing received L2CAP packet due to lack of integer overflow check' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2019-14063 | 9.1 | Feb 7 | Out of bound access due to Invalid inputs to dapm mux settings which results into kernel failure in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2019-14057 | 9.1 | Feb 7 | Buffer Over read of codec private data while parsing an mkv file due to lack of check of buffer size before read in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2019-10579 | 9.1 | Jan 21 | Buffer over-read can occur while playing the video clip which is not standard in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2023-28572 | 8.8 | Nov 7 | Memory corruption in WLAN HOST while processing the WLAN scan descriptor list Affected: All versions, or not specified |
| CVE-2022-33288 | 8.8 | Apr 13 | Memory corruption due to buffer copy without checking the size of input in Core while sending SCM command to get write protection information Affected: All versions, or not specified |
| CVE-2022-33280 | 8.8 | Feb 12 | Memory corruption due to access of uninitialized pointer in Bluetooth HOST while processing the AVRCP packet Affected: All versions, or not specified |
| CVE-2021-1942 | 8.8 | Apr 1 | Improper handling of permissions of a shared memory region can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2021-30285 | 8.8 | Jan 13 | Improper validation of memory region in Hypervisor can lead to incorrect region mapping in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2020-11155 | 8.8 | Nov 2 | u'Buffer overflow while processing PDU packet in bluetooth due to lack of check of buffer length before copying into it.' in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2020-11154 | 8.8 | Nov 2 | u'Buffer overflow while processing a crafted PDU data packet in bluetooth due to lack of check of buffer size before copying' in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2024-33035 | 8.4 | Sep 2 | Integer Overflow or Wraparound in Display Affected: 0 |
| CVE-2024-23365 | 8.4 | Sep 2 | Use After Free in SCE-Mink Affected: 0 |
| CVE-2021-1932 | 8.4 | Oct 20 | Improper access control in trusted application environment can cause unauthorized access to CDSP or ADSP VM memory with either privilege in Snapdragon Auto, Snapdragon Compute,… Affected: All versions, or not specified |
| CVE-2021-1917 | 8.4 | Oct 20 | Null pointer dereference can occur due to memory allocation failure in DIAG in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1913 | 8.4 | Oct 20 | Possible integer overflow due to improper length check while updating grace period and count record in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2025-21488 | 8.2 | Sep 24 | Buffer Over-read in Data Network Stack & Connectivity Affected: All versions, or not specified |
| CVE-2024-53026 | 8.2 | Jun 3 | Buffer Over-read in Data Network Stack & Connectivity Affected: All versions, or not specified |
| CVE-2024-53020 | 8.2 | Jun 3 | Buffer Over-read in Data Network Stack & Connectivity Affected: All versions, or not specified |
| CVE-2024-53019 | 8.2 | Jun 3 | Buffer Over-read in Data Network Stack & Connectivity Affected: All versions, or not specified |
| CVE-2024-45552 | 8.2 | Apr 7 | Buffer Over-read in Data Network Stack & Connectivity Affected: All versions, or not specified |
| CVE-2024-33073 | 8.2 | Oct 7 | Information disclosure while parsing the BSS parameter change count or MLD capabilities fields of the ML IE Affected: All versions, or not specified |
| CVE-2023-22382 | 8.2 | Oct 3 | Weak configuration in Automotive while VM is processing a listener request from TEE Affected: All versions, or not specified |
| CVE-2022-33268 | 8.1 | Dec 13 | Information disclosure due to buffer over-read in Bluetooth HOST while pairing and connecting A2DP Affected: All versions, or not specified |
| CVE-2024-53011 | 7.9 | Mar 3 | Information disclosure may occur due to improper permission and access controls to Video Analytics engine Affected: All versions, or not specified |
| CVE-2026-57545 | 7.8 | Oct 6 | Untrusted Pointer Dereference in Graphics Affected: All versions, or not specified |
| CVE-2026-25267 | 7.8 | Oct 6 | Missing Authorization in Core Affected: All versions, or not specified |
| CVE-2026-24080 | 7.8 | Aug 4 | Buffer Copy Without Checking Size of Input in Biometrics Affected: All versions, or not specified |
| CVE-2026-21366 | 7.8 | Aug 4 | Integer Overflow or Wraparound in Data Network Stack & Connectivity Affected: All versions, or not specified |
| CVE-2026-24082 | 7.8 | May 4 | Use After Free in Automotive GPU Affected: All versions, or not specified |
| CVE-2025-47404 | 7.8 | May 4 | Buffer Copy Without Checking Size of Input in Automotive Audio Affected: All versions, or not specified |
| CVE-2025-47386 | 7.8 | Mar 2 | Use After Free in Automotive Audio Affected: All versions, or not specified |
| CVE-2025-47381 | 7.8 | Mar 2 | Use After Free in Automotive Audio Affected: All versions, or not specified |
| CVE-2025-47375 | 7.8 | Mar 2 | Use After Free in Automotive Audio Affected: All versions, or not specified |
| CVE-2025-47398 | 7.8 | Feb 2 | Use After Free in Graphics Affected: All versions, or not specified |
| CVE-2025-47366 | 7.8 | Feb 2 | Exposed Dangerous Method or Function in HLOS Affected: All versions, or not specified |
| CVE-2025-47364 | 7.8 | Feb 2 | Integer Overflow or Wraparound in Automotive Affected: All versions, or not specified |
| CVE-2025-47363 | 7.8 | Feb 2 | Integer Overflow or Wraparound in Automotive Affected: All versions, or not specified |
