Sd660

Vendor:

First CVE: Nov 12, 2020 · Active for 5 years

387
Total CVEs
More Total CVEs than 100% of tracked products
55.3
Avg CVEs / Year
Higher CVE frequency than 99% of tracked products
7.9
Avg CVSS
Higher Avg CVSS than 68% of tracked products
1.8%
KEV Rate
Higher KEV Rate than 96% of tracked products

Trends Over Time

The number and severity of CVEs published that impact Sd660 over time

Volume of CVEsAvg CVSS Base Score
First CVE
Nov 12, 2020
5 years ago
Most Recent CVE
Jan 7, 2026
200 days ago

CVE Severity & Scoring

Sd660387 CVEs
All CVEs352,719 CVEs
MediumHighCritical
Attack Vector
Local215 (55.6%)
Network160 (41.3%)
Unknown0 (0.0%)
Physical4 (1.0%)
Adjacent Network8 (2.1%)
Attack Complexity
Low379 (97.9%)
High8 (2.1%)
Unknown0 (0.0%)
User Interaction
None387 (100.0%)
Unknown0 (0.0%)
Required0 (0.0%)
Privileges Required
Low210 (54.3%)
High5 (1.3%)
None172 (44.4%)
Unknown0 (0.0%)

Top CVEs

Signals from CVEs in this product scope (387 CVEs).

387 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
Possible use after free due to improper handling of memory mapping of multiple processes simultaneously. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon
May 7, 20217.867YESNO
Memory corruption while maintaining memory maps of HLOS memory.
Oct 7, 20247.865YESNO
Memory corruption in DSP Services during a remote call from HLOS to DSP.
Dec 5, 20237.864YESNO
Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.
Dec 5, 20237.863YESNO
Improper handling of address deregistration on failure can lead to new GPU address allocation failure. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon C
May 7, 20215.556YESNO
Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.
Dec 5, 20237.855YESNO
Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectiv
Jun 9, 20217.855YESNO
Improper authentication of Non-EAPOL/WAPI plaintext frames during four-way handshake can lead to arbitrary network packet injection in Snapdragon Auto, Snapdragon Compute, Snapdrag
Sep 8, 20219.836NONO
Memory corruption when the UE receives an RTP packet from the network, during the reassembly of NALUs.
Sep 24, 20259.833NONO
An out of bound memory access can occur due to improper validation of number of frames being passed during music playback in Snapdragon Auto, Snapdragon Compute, Snapdragon Connect
Jan 3, 20229.832NONO

Exploit Exposure

Signals from CVEs in this product scope (387 CVEs).

CISA KEV
7 CVEs
1.8% of CVEs· 96th percentile
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

Signals from CVEs in this product scope (387 CVEs).

Media Mentions

Signals from CVEs in this product scope (387 CVEs).

Top CNAs Publishing CVEs For Sd660

Top CWEs

Versions

No cataloged versions.