Qualcomm Sm6650P vulnerabilities, page 4
100 vulnerabilities
Known vulnerabilities in Qualcomm Sm6650P, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2025-27029qualcomm, inc. · snapdragon +67 moreBuffer Over-read in WLAN HALTransient DOS while processing the tone measurement response buffer when the response buffer is out of range.EPSS0.24%HighCVE-2025-27065qualcomm, inc. · snapdragon +149 moreBuffer Over-read in WLAN FirmwareTransient DOS while processing a frame with malformed shared-key descriptor.EPSS0.22%HighCVE-2025-27062qualcomm, inc. · snapdragon +152 moreImproper Access Control in Automotive MultimediaMemory corruption while handling client exceptions, allowing unauthorized channel access.EPSS0.08%HighCVE-2025-27038qualcomm, inc. · snapdragon +44 moreUse After Free in GraphicsMemory corruption while rendering graphics using Adreno GPU drivers in Chrome.KEVEPSS1.02%HighCVE-2025-27052qualcomm, inc. · snapdragon +154 moreBuffer Copy Without Checking Size of Input in Core ServicesMemory corruption while processing data packets in diag received from Unix clients.EPSS0.10%HighCVE-2025-27043qualcomm, inc. · snapdragon +203 moreBuffer Copy Without Checking Size of Input in VideoMemory corruption while processing manipulated payload in video firmware.EPSS0.10%HighCVE-2025-27053qualcomm, inc. · snapdragon +317 moreIncorrect Calculation of Buffer Size in HLOSMemory corruption during PlayReady APP usecase while processing TA commands.EPSS0.09%HighCVE-2025-27066qualcomm, inc. · snapdragon +370 moreReachable Assertion in WLAN FirmwareTransient DOS while processing an ANQP message.EPSS0.28%MediumCVE-2024-53015qualcomm, inc. · snapdragon +90 moreUse After Free in Computer VisionMemory corruption while processing IOCTL command to handle buffers associated with a session.EPSS0.09%HighCVE-2024-53026qualcomm, inc. · snapdragon +232 moreBuffer Over-read in Data Network Stack & ConnectivityInformation disclosure when an invalid RTCP packet is received during a VoLTE/VoWiFi IMS call.EPSS0.30%HighCVE-2024-53021qualcomm, inc. · snapdragon +223 moreBuffer Over-read in Data Network Stack & ConnectivityInformation disclosure may occur while processing goodbye RTCP packet from network.EPSS0.24%HighCVE-2024-53019qualcomm, inc. · snapdragon +79 moreBuffer Over-read in Data Network Stack & ConnectivityInformation disclosure may occur while decoding the RTP packet with improper header length for number of contributing sources.EPSS0.24%HighCVE-2024-53020qualcomm, inc. · snapdragon +232 moreBuffer Over-read in Data Network Stack & ConnectivityInformation disclosure may occur while decoding the RTP packet with invalid header extension from network.EPSS0.24%HighCVE-2024-49845qualcomm, inc. · snapdragon +144 moreImproper Input Validation in HLOSMemory corruption during the FRS UDS generation process.EPSS0.11%HighCVE-2024-49835qualcomm, inc. · snapdragon +207 moreOut-of-bounds Write in SPS ApplicationsMemory corruption while reading secure file.EPSS0.11%HighCVE-2024-49844qualcomm, inc. · snapdragon +179 moreImproper Input Validation in AutomotiveMemory corruption while triggering commands in the PlayReady Trusted application.EPSS0.11%HighCVE-2026-21381qualcomm, inc. · snapdragon +102 moreBuffer Over-read in WLAN FirmwareTransient DOS when receiving a service data frame with excessive length during device matching over a neighborhood awareness network protocol connection.EPSS0.15%HighCVE-2026-21367qualcomm, inc. · snapdragon +149 moreBuffer Over-read in WLAN FirmwareTransient DOS when processing nonstandard FILS Discovery Frames with out-of-range action sizes during initial scans.EPSS0.20%HighCVE-2026-21385qualcomm, inc. · snapdragon +230 moreInteger Overflow or Wraparound in GraphicsMemory corruption while using alignments for memory allocation.KEVEPSS1.29%HighCVE-2026-25275qualcomm, inc. · snapdragon +369 moreBuffer Over-read in WLAN FirmwareTransient DOS when processing authentication frames with invalid FILS information element header lengths.EPSS0.19%