SF
Product
Sd660 Firmware
On CISA KEVExploited in the wild
69
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 9High 49Medium 11Low 0
Watch
Add Sd660 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-1931 | 6.7 | Jul 13 | Possible buffer overflow due to improper validation of buffer length while processing fast boot commands in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2025-47333 | 6.6 | Jan 6 | Use After Free in HLOS Affected: All versions, or not specified |
| CVE-2022-33255 | 6.5 | Jan 9 | Information disclosure due to buffer over-read in Bluetooth HOST while processing GetFolderItems and GetItemAttribute Cmds from peer device Affected: All versions, or not specified |
| CVE-2021-30342 | 5.9 | Jun 14 | Improper integrity check can lead to race condition between tasks PDCP and RRC? after a valid RRC Command packet has been received in Snapdragon Auto, Snapdragon Compute,… Affected: All versions, or not specified |
| CVE-2025-27041 | 5.5 | Oct 9 | Buffer Over-read in Video Affected: All versions, or not specified |
| CVE-2023-43528 | 5.5 | May 6 | Information disclosure when the ADSP payload size received in HLOS in response to Audio Stream Manager matrix session is less than this expected size Affected: All versions, or not specified |
| CVE-2023-43527 | 5.5 | May 6 | Information disclosure while parsing dts header atom in Video Affected: All versions, or not specified |
| CVE-2023-33070 | 5.5 | Dec 5 | Transient DOS in Automotive OS due to improper authentication to the secure IO calls Affected: All versions, or not specified |
| CVE-2023-28566 | 5.5 | Nov 7 | Information disclosure in WLAN HAL while handling the WMI state info command Affected: All versions, or not specified |
| CVE-2022-25676 | 5.5 | Nov 15 | Information disclosure in video due to buffer over-read while parsing avi files in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT,… Affected: All versions, or not specified |
| CVE-2020-11209 | 5.5 | Nov 12 | Improper authorization in DSP process could allow unauthorized users to downgrade the library versions in SD820, SD821, SD820, QCS603, QCS605, SDA855, SA6155P, SA6145P, SA6155,… Affected: All versions, or not specified |
Showing 11