S5
Product
Sd865 5g Firmware
On CISA KEVExploited in the wild
257
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 15High 189Medium 53Low 0
Watch
Add Sd865 5g Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-33042 | 7.5 | Dec 5 | Transient DOS in Modem after RRC Setup message is received Affected: All versions, or not specified |
| CVE-2023-28540 | 7.5 | Oct 3 | Cryptographic issue in Data Modem due to improper authentication during TLS handshake Affected: All versions, or not specified |
| CVE-2023-24843 | 7.5 | Oct 3 | Transient DOS in Modem while triggering a camping on an 5G cell Affected: All versions, or not specified |
| CVE-2023-21646 | 7.5 | Sep 5 | Transient DOS in Modem while processing invalid System Information Block 1 Affected: All versions, or not specified |
| CVE-2023-28555 | 7.5 | Aug 8 | Transient DOS in Audio while remapping channel buffer in media codec decoding Affected: All versions, or not specified |
| CVE-2023-21669 | 7.5 | Jun 6 | Information Disclosure in WLAN HOST while sending DPP action frame to peer with an invalid source address Affected: All versions, or not specified |
| CVE-2022-40536 | 7.5 | Jun 6 | Transient DOS due to improper authentication in modem while receiving plain TLB OTA request message from network Affected: All versions, or not specified |
| CVE-2022-33251 | 7.5 | Jun 6 | Transient DOS due to reachable assertion in Modem because of invalid network configuration Affected: All versions, or not specified |
| CVE-2022-22060 | 7.5 | Jun 6 | Assertion occurs while processing Reconfiguration message due to improper validation Affected: All versions, or not specified |
| CVE-2022-40508 | 7.5 | May 2 | Transient DOS due to reachable assertion in Modem while processing config related to cross carrier scheduling, which is not supported Affected: All versions, or not specified |
| CVE-2022-40535 | 7.5 | Mar 10 | Transient DOS due to buffer over-read in WLAN while sending a packet to device Affected: All versions, or not specified |
| CVE-2022-33272 | 7.5 | Mar 10 | Transient DOS in modem due to reachable assertion Affected: All versions, or not specified |
| CVE-2022-33254 | 7.5 | Mar 10 | Transient DOS due to reachable assertion in Modem while processing SIB1 Message Affected: All versions, or not specified |
| CVE-2022-33250 | 7.5 | Mar 10 | Transient DOS due to reachable assertion in modem when network repeatedly sent invalid message container for NR to LTE handover Affected: All versions, or not specified |
| CVE-2022-25702 | 7.5 | Dec 13 | Denial of service in modem due to reachable assertion while processing reconfiguration message in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2022-25692 | 7.5 | Dec 13 | Denial of service in Modem due to reachable assertion while processing the common config procedure in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2022-25662 | 7.5 | Oct 12 | Information disclosure due to untrusted pointer dereference in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-35096 | 7.5 | Jun 14 | Improper memory allocation during counter check DLM handling can lead to denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial… Affected: All versions, or not specified |
| CVE-2021-35087 | 7.5 | Jun 14 | Possible null pointer access due to improper validation of system information message to be processed in Snapdragon Industrial IOT, Snapdragon Mobile Affected: All versions, or not specified |
| CVE-2021-35086 | 7.5 | Jun 14 | Possible buffer over read due to improper validation of SIB type when processing a NR system Information message in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2021-35076 | 7.5 | Jun 14 | Possible null pointer dereference due to improper validation of RRC connection reconfiguration message in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-35073 | 7.5 | Jun 14 | Possible assertion due to improper validation of rank restriction field in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-30340 | 7.5 | Jun 14 | Reachable assertion due to improper validation of coreset in PDCCH configuration in SA mode in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial… Affected: All versions, or not specified |
| CVE-2021-30332 | 7.5 | Apr 1 | Possible assertion due to improper validation of OTA configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile Affected: All versions, or not specified |
| CVE-2021-30329 | 7.5 | Apr 1 | Possible assertion due to improper validation of TCI configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile Affected: All versions, or not specified |
| CVE-2021-30328 | 7.5 | Apr 1 | Possible assertion due to improper validation of invalid NR CSI-IM resource configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial… Affected: All versions, or not specified |
| CVE-2021-30326 | 7.5 | Feb 11 | Possible assertion due to improper size validation while processing the DownlinkPreemption IE in an RRC Reconfiguration/RRC Setup message in Snapdragon Auto, Snapdragon Compute,… Affected: All versions, or not specified |
| CVE-2021-30307 | 7.5 | Jan 13 | Possible denial of service due to improper validation of DNS response when DNS client requests with PTR, NAPTR or SRV query type in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-30301 | 7.5 | Jan 13 | Possible denial of service due to out of memory while processing RRC and NAS OTA message in Snapdragon Auto, Snapdragon Industrial IOT, Snapdragon Mobile Affected: All versions, or not specified |
| CVE-2021-30287 | 7.5 | Jan 13 | Possible assertion due to improper validation of symbols configured for PDCCH monitoring in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial… Affected: All versions, or not specified |
| CVE-2021-30293 | 7.5 | Jan 3 | Possible assertion due to lack of input validation in PUSCH configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1982 | 7.5 | Nov 12 | Possible denial of service scenario due to improper input validation of received NAS OTA message in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1907 | 7.5 | Jul 13 | Possible buffer overflow due to lack of length check in BA request in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial… Affected: All versions, or not specified |
| CVE-2025-59617 | 7.3 | Jul 6 | Use After Free in Computer Vision Affected: All versions, or not specified |
| CVE-2026-24089 | 7.2 | Jun 1 | Improper Validation of Syntactic Correctness of Input in Kernel Affected: All versions, or not specified |
| CVE-2026-24087 | 7.2 | Jun 1 | Improper Validation of Syntactic Correctness of Input in Kernel Affected: All versions, or not specified |
| CVE-2025-47378 | 7.1 | Mar 2 | Exposure of Sensitive System Information to an Unauthorized Control Sphere in HLOS Affected: All versions, or not specified |
| CVE-2023-33065 | 7.1 | Feb 6 | Information disclosure in Audio while accessing AVCS services from ADSP payload Affected: All versions, or not specified |
| CVE-2022-25665 | 7.1 | Oct 12 | Information disclosure due to buffer over read in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Mobile Affected: All versions, or not specified |
| CVE-2021-35085 | 7.1 | Jun 14 | Possible buffer overflow due to lack of buffer length check during management frame Rx handling in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-35084 | 7.1 | Jun 14 | Possible out of bound read due to lack of length check of data length for a DIAG event in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2021-30306 | 7.1 | Oct 20 | Possible buffer over read due to improper buffer allocation for file length passed from user space in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Industrial IOT,… Affected: All versions, or not specified |
| CVE-2021-30297 | 7.1 | Oct 20 | Possible out of bound read due to improper validation of packet length while handling data transfer in VR service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2021-1985 | 7.1 | Oct 20 | Possible buffer over read due to lack of data length check in QVR Service configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2026-25260 | 7.0 | Jun 1 | Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service Affected: All versions, or not specified |
| CVE-2025-47407 | 7.0 | May 4 | Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service Affected: All versions, or not specified |
| CVE-2024-38418 | 7.0 | Feb 3 | Memory corruption while parsing the memory map info in IOCTL calls Affected: All versions, or not specified |
| CVE-2024-33040 | 7.0 | Dec 2 | Memory corruption while invoking redundant release command to release one buffer from user space as race condition can occur in kernel space between buffer release and buffer… Affected: All versions, or not specified |
| CVE-2023-28576 | 7.0 | Aug 8 | The buffer obtained from kernel APIs such as cam_mem_get_cpu_buf() may be readable/writable in userspace after kernel accesses it Affected: All versions, or not specified |
| CVE-2022-33214 | 7.0 | Oct 17 | Memory corruption in display due to time-of-check time-of-use of metadata reserved size in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT,… Affected: All versions, or not specified |