sm6250_firmware vulnerabilities
CVEs whose affected-version data names the sm6250_firmware package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
8 CVEsRSS
CVE-2026-25267High· 7.8Memory corruption when non-secure loader rewrites page tables before secure memory initialization.
Memory corruption when non-secure loader rewrites page tables before secure memory initialization.
CVE-2026-24075High· 7.8Memory Corruption when multiple threads issue concurrent IOCTL requests to the device control handler due to improper synchronization and race conditions.
Memory Corruption when multiple threads issue concurrent IOCTL requests to the device control handler due to improper synchronization and race conditions.
CVE-2026-24074High· 7.8Memory Corruption when processing data with large offset and length values exceeds buffer limits during data copy operations.
Memory Corruption when processing data with large offset and length values exceeds buffer limits during data copy operations.
CVE-2025-47408High· 7.8Memory corruption when another driver calls an IOCTL with invalid input/output buffer.
Memory corruption when another driver calls an IOCTL with invalid input/output buffer.
CVE-2025-47392High· 8.8Memory corruption when decoding corrupted satellite data files with invalid signature offsets.
Memory corruption when decoding corrupted satellite data files with invalid signature offsets.
CVE-2025-27054High· 7.8Memory corruption while processing a malformed license file during reboot.
Memory corruption while processing a malformed license file during reboot.
CVE-2025-27053High· 7.8Memory corruption during PlayReady APP usecase while processing TA commands.
Memory corruption during PlayReady APP usecase while processing TA commands.
CVE-2025-21482High· 7.1Cryptographic issue while performing RSA PKCS padding decoding.
Cryptographic issue while performing RSA PKCS padding decoding.