本页列出影响 qualcomm sda660_firmware 的已公开 CVE 漏洞（通过 NVD CPE 关联）。每行包含严重程度评分、摘要与发布日期，便于识别与分析安全问题。
| CVE | 摘要 | 来源 | 最高 CVSS | EPSS % | 公开时间 | 更新时间 |
|---|---|---|---|---|---|---|
| CVE-2026-24091 | Memory corruption while processing fastboot commands with improperly formatted input. | [email protected] | 7.2 | 0.10% | 2026-06-01 | 2026-06-17 |
| CVE-2026-24085 | Memory Corruption when processing display command line information due to improper initialization of a variable. | [email protected] | 7.2 | 0.10% | 2026-06-01 | 2026-06-17 |
| CVE-2025-59610 | Memory Corruption when processing IOCTL requests with mismatched API versions due to concurrent modification of user-space buffer. | [email protected] | 6.4 | 0.06% | 2026-06-01 | 2026-06-17 |
| CVE-2025-47404 | Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified. | [email protected] | 6.5 | 0.07% | 2026-05-04 | 2026-06-17 |
| CVE-2026-21385 KEV | Memory corruption while using alignments for memory allocation. | [email protected] | 7.8 | 1.07% | 2026-03-02 | 2026-06-17 |
| CVE-2025-47386 | Memory Corruption while invoking IOCTL calls when concurrent access to shared buffer occurs. | [email protected] | 7.8 | 0.07% | 2026-03-02 | 2026-06-17 |
| CVE-2025-47383 | Weak configuration may lead to cryptographic issue when a VoWiFi call is triggered from UE. | [email protected] | 7.2 | 0.13% | 2026-03-02 | 2026-06-17 |
| CVE-2025-47379 | Memory Corruption when concurrent access to shared buffer occurs due to improper synchronization between assignment and deallocation of buffer resources. | [email protected] | 7.8 | 0.07% | 2026-03-02 | 2026-06-17 |
| CVE-2025-47376 | Memory Corruption when concurrent access to shared buffer occurs during IOCTL calls. | [email protected] | 7.8 | 0.07% | 2026-03-02 | 2026-06-17 |
| CVE-2025-47375 | Memory corruption while handling different IOCTL calls from the user-space simultaneously. | [email protected] | 7.8 | 0.07% | 2026-03-02 | 2026-06-17 |
| CVE-2025-47398 | Memory Corruption while deallocating graphics processing unit memory buffers due to improper handling of memory pointers. | [email protected] | 7.8 | 0.09% | 2026-02-02 | 2026-06-17 |
| CVE-2018-11922 | Wrong configuration in Touch Pal application can collect user behavior data without awareness by the user. | [email protected] | 9.8 | 0.17% | 2024-11-26 | 2026-06-16 |
| CVE-2021-30327 | Buffer overflow in sahara protocol while processing commands leads to overwrite of secure configuration data in Snapdragon Mobile, Snapdragon Compute, Snapdragon Auto, Snapdragon IOT, Snapdragon Connectivity, Snapdragon Voice & Music | [email protected] | 7.5 | 0.17% | 2022-06-14 | 2026-06-16 |
| CVE-2020-3639 | u'When a non standard SIP sigcomp message is received from the network, then there may be chances of using more UDVM cycle or memory overflow' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in APQ8009, APQ8017, APQ8037, APQ8053, MDM9250, MDM9607, MDM9628, MDM9640, MDM9650, MSM8108, MSM8208, MSM8209, MSM8608, MSM8905, MSM8909, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, QCM4290, QCM6125, QCS410, QCS42 | [email protected] | 9.8 | 0.90% | 2020-11-12 | 2026-06-16 |
| CVE-2020-11207 | Buffer overflow in LibFastCV library due to improper size checks with respect to buffer length' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in APQ8052, APQ8056, APQ8076, APQ8096, APQ8096SG, APQ8098, MDM9655, MSM8952, MSM8956, MSM8976, MSM8976SG, MSM8996, MSM8996SG, MSM8998, QCM4290, QCM6125, QCS410, QCS4290, QCS610, QCS6125, QSM8250, SA6145P, SA6150P, SA6155, SA6155P, SA8150P, SA8155, SA8155P, SA8195P, SC7180, SDA640, SDA660, SDA8 | [email protected] | 7.8 | 1.47% | 2020-11-12 | 2026-06-16 |
| CVE-2020-11206 | Possible buffer overflow in Fastrpc while handling received parameters due to lack of validation on input parameters' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in APQ8098, MSM8998, QCM4290, QCM6125, QCS410, QCS4290, QCS610, QCS6125, QSM8250, QSM8350, SA6145P, SA6150P, SA6155, SA6155P, SA8150P, SA8155, SA8155P, SA8195P, SC7180, SDA640, SDA660, SDA845, SDA855, SDM640, SDM660, SDM830, SDM845, SDM850, SDX50M, SDX55, SDX55M, SM4250, | [email protected] | 7.8 | 1.82% | 2020-11-12 | 2026-06-16 |
| CVE-2020-11196 | u'Integer overflow to buffer overflow occurs while playback of ASF clip having unexpected number of codec entries' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8009W, APQ8017, APQ8037, APQ8053, APQ8064AU, APQ8096, APQ8096AU, APQ8096SG, APQ8098, MDM9206, MDM9650, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8996SG, MSM89 | [email protected] | 9.8 | 0.89% | 2020-11-12 | 2026-06-16 |
| CVE-2020-11193 | u'Buffer over read can happen while parsing mkv clip due to improper typecasting of data returned from atomsize' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8009W, APQ8017, APQ8037, APQ8053, APQ8064AU, APQ8096, APQ8096AU, APQ8096SG, APQ8098, MDM9206, MDM9650, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8996SG, MSM8998 | [email protected] | 9.8 | 0.90% | 2020-11-12 | 2026-06-16 |
| CVE-2020-11168 | u'Null-pointer dereference can occur while accessing data buffer beyond its size that leads to access the buffer beyond its range' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8009W, APQ8017, APQ8053, APQ8064AU, APQ8096AU, APQ8098, MDM9206, MDM9650, MSM8909W, MSM8953, MSM8996AU, QCM4290, QCS405, QCS4290, QCS603, QCS605, QM215, QSM8350, SA6155, SA6155P, SA8155, SA8155P, | [email protected] | 9.8 | 0.90% | 2020-11-12 | 2026-06-16 |
| CVE-2020-11123 | u'information disclosure in gatekeeper trustzone implementation as the throttling mechanism to prevent brute force attempts at getting user`s lock-screen password can be bypassed by performing the standard gatekeeper operations.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8009W, A | [email protected] | 5.5 | 0.19% | 2020-11-12 | 2026-06-16 |