SF
Product
Sm4635 Firmware
On CISA KEVExploited in the wild
30
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 22Medium 7Low 0
Watch
Add Sm4635 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-21479 In wildKEV | 8.6 | Jun 3 | Incorrect Authorization in Graphics Affected: All versions, or not specified |
| CVE-2025-21480 In wildKEV | 8.6 | Jun 3 | Incorrect Authorization in Graphics Windows Affected: All versions, or not specified |
| CVE-2025-27034 | 9.8 | Sep 24 | Memory corruption while selecting the PLMN from SOR failed list Affected: All versions, or not specified |
| CVE-2025-47345 | 8.4 | Jan 7 | Cryptographic issue may occur while encrypting license data Affected: All versions, or not specified |
| CVE-2025-21488 | 8.2 | Sep 24 | Information disclosure while decoding this RTP packet headers received by UE from the network when the padding bit is set Affected: All versions, or not specified |
| CVE-2024-53019 | 8.2 | Jun 3 | Information disclosure may occur while decoding the RTP packet with improper header length for number of contributing sources Affected: All versions, or not specified |
| CVE-2025-47366 | 7.8 | Feb 2 | Cryptographic issue when a Trusted Zone with outdated code is triggered by a HLOS providing incorrect input Affected: All versions, or not specified |
| CVE-2025-47346 | 7.8 | Jan 7 | Memory corruption while processing a secure logging command in the trusted application Affected: All versions, or not specified |
| CVE-2025-27054 | 7.8 | Oct 9 | Memory corruption while processing a malformed license file during reboot Affected: All versions, or not specified |
| CVE-2025-27061 | 7.8 | Jul 8 | Memory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the video firmware Affected: All versions, or not specified |
| CVE-2025-27043 | 7.8 | Jul 8 | Memory corruption while processing manipulated payload in video firmware Affected: All versions, or not specified |
| CVE-2024-53010 | 7.8 | Jun 3 | Memory corruption may occur while attaching VM when the HLOS retains access to VM Affected: All versions, or not specified |
| CVE-2025-21453 | 7.8 | May 6 | Memory corruption while processing a data structure, when an iterator is accessed after it has been removed, potential failures occur Affected: All versions, or not specified |
| CVE-2024-49835 | 7.8 | May 6 | Memory corruption while reading secure file Affected: All versions, or not specified |
| CVE-2025-21424 | 7.8 | Mar 3 | Memory corruption while calling the NPU driver APIs concurrently Affected: All versions, or not specified |
| CVE-2024-53024 | 7.8 | Mar 3 | Memory corruption in display driver while detaching a device Affected: All versions, or not specified |
| CVE-2024-49843 | 7.8 | Feb 3 | Memory corruption while processing IOCTL from user space to handle GPU AHB bus error Affected: All versions, or not specified |
| CVE-2024-49834 | 7.8 | Feb 3 | Memory corruption while power-up or power-down sequence of the camera sensor Affected: All versions, or not specified |
| CVE-2024-43048 | 7.8 | Dec 2 | Memory corruption when invalid input is passed to invoke GPU Headroom API call Affected: All versions, or not specified |
| CVE-2024-38421 | 7.8 | Nov 4 | Memory corruption while processing GPU commands Affected: All versions, or not specified |
| CVE-2024-38419 | 7.8 | Nov 4 | Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node Affected: All versions, or not specified |
| CVE-2024-23369 | 7.8 | Oct 7 | Memory corruption when invalid length is provided from HLOS for FRS/UDS request/response buffers Affected: All versions, or not specified |
| CVE-2025-21454 | 7.5 | Jul 8 | Transient DOS while processing received beacon frame Affected: All versions, or not specified |
| CVE-2025-47334 | 6.7 | Jan 7 | Memory corruption while processing shared command buffer packet between camera userspace and kernel Affected: All versions, or not specified |
| CVE-2025-47319 | 6.7 | Dec 18 | Information disclosure while exposing internal TA-to-TA communication APIs to HLOS Affected: All versions, or not specified |
| CVE-2025-47333 | 6.6 | Jan 7 | Memory corruption while handling buffer mapping operations in the cryptographic driver Affected: All versions, or not specified |
| CVE-2024-53015 | 6.6 | Jun 3 | Memory corruption while processing IOCTL command to handle buffers associated with a session Affected: All versions, or not specified |
| CVE-2025-47344 | 6.4 | Jan 7 | Memory corruption while handling sensor utility operations Affected: All versions, or not specified |
| CVE-2025-21433 | 5.5 | Jul 8 | Transient DOS when importing a PKCS#8-encoded RSA private key with a zero-sized modulus Affected: All versions, or not specified |
| CVE-2024-43046 | 5.5 | Apr 7 | There may be information disclosure during memory re-allocation in TZ Secure OS Affected: All versions, or not specified |
Showing 30
