Pm8937
Vendor:
First CVE: Jan 21, 2021 · Active for 5 years
119
Total CVEs
More Total CVEs than 99% of tracked products
23.8
Avg CVEs / Year
Higher CVE frequency than 99% of tracked products
8.1
Avg CVSS
Higher Avg CVSS than 71% of tracked products
2.5%
KEV Rate
Higher KEV Rate than 96% of tracked products
Trends Over Time
The number and severity of CVEs published that impact Pm8937 over time
Volume of CVEsAvg CVSS Base Score
First CVE
Jan 21, 2021
5 years ago
Most Recent CVE
Oct 9, 2025
288 days ago
CVE Severity & Scoring
Pm8937119 CVEs
13%
51%
36%
All CVEs352,231 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local62 (52.1%)
Network55 (46.2%)
Unknown0 (0.0%)
Physical1 (0.8%)
Adjacent Network1 (0.8%)
Attack Complexity
Low113 (95.0%)
High6 (5.0%)
Unknown0 (0.0%)
User Interaction
None119 (100.0%)
Unknown0 (0.0%)
Required0 (0.0%)
Privileges Required
Low56 (47.1%)
High5 (4.2%)
None58 (48.7%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (119 CVEs).
119 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2021-1905HIGH Possible use after free due to improper handling of memory mapping of multiple processes simultaneously. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon | May 7, 2021 | 7.8 | 67 | YES | NO |
CVE-2021-1906MEDIUM Improper handling of address deregistration on failure can lead to new GPU address allocation failure. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon C | May 7, 2021 | 5.5 | 56 | YES | NO |
CVE-2020-11261HIGH Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectiv | Jun 9, 2021 | 7.8 | 55 | YES | NO |
CVE-2022-25718CRITICAL Cryptographic issue in WLAN due to improper check on return value while authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connec | Oct 19, 2022 | 9.8 | 31 | NO | NO |
CVE-2022-22087CRITICAL memory corruption in video due to buffer overflow while parsing mkv clip with no codechecker in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IO | Jun 14, 2022 | 9.8 | 30 | NO | NO |
CVE-2021-1910CRITICAL Double free in video due to lack of input buffer length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, S | May 7, 2021 | 9.8 | 30 | NO | NO |
CVE-2020-3686CRITICAL Possible memory out of bound issue during music playback when an incorrect bit stream content is copied into array without checking the length of array in Snapdragon Auto, Snapdrag | Jan 21, 2021 | 9.8 | 30 | NO | NO |
CVE-2022-25668CRITICAL Memory corruption in video driver due to double free while parsing ASF clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Ind | Sep 2, 2022 | 9.8 | 29 | NO | NO |
CVE-2022-25659CRITICAL Memory corruption due to buffer overflow while parsing MKV clips with invalid bitmap size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, | Sep 2, 2022 | 9.8 | 29 | NO | NO |
CVE-2020-11307CRITICAL Buffer overflow in modem due to improper array index check before copying into it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdrag | Jul 13, 2021 | 9.8 | 29 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (119 CVEs).
CISA KEV
3 CVEs
2.5% of CVEs· 96th percentile
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (119 CVEs).
Media Mentions
Signals from CVEs in this product scope (119 CVEs).
Top CNAs Publishing CVEs For Pm8937
Top CWEs
Versions
No cataloged versions.