Sda660 Firmware
Vendor:
First CVE: Sep 20, 2018 · Active for 7 years
421
Total CVEs
More Total CVEs than 100% of tracked products
70.2
Avg CVEs / Year
Higher CVE frequency than 100% of tracked products
8.0
Avg CVSS
Higher Avg CVSS than 70% of tracked products
0.2%
KEV Rate
Higher KEV Rate than 96% of tracked products
Trends Over Time
The number and severity of CVEs published that impact Sda660 Firmware over time
Volume of CVEsAvg CVSS Base Score
First CVE
Sep 20, 2018
7 years ago
Most Recent CVE
Jun 1, 2026
52 days ago
CVE Severity & Scoring
Sda660 Firmware421 CVEs
14%
55%
31%
All CVEs352,101 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local259 (61.5%)
Network152 (36.1%)
Unknown0 (0.0%)
Physical3 (0.7%)
Adjacent Network7 (1.7%)
Attack Complexity
Low409 (97.1%)
High12 (2.9%)
Unknown0 (0.0%)
User Interaction
None418 (99.3%)
Unknown0 (0.0%)
Required3 (0.7%)
Privileges Required
Low257 (61.0%)
High4 (1.0%)
None160 (38.0%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (421 CVEs).
421 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2026-21385HIGH Memory corruption while using alignments for memory allocation. | Mar 2, 2026 | 7.8 | 73 | YES | NO |
CVE-2020-3657CRITICAL u'Remote code execution can happen by sending a carefully crafted POST query when Device configuration is accessed from a tethered client through webserver due to lack of array bou | Nov 2, 2020 | 9.8 | 45 | NO | NO |
CVE-2019-10529HIGH Possible use after free issue due to race condition while attempting to mark the entry pages as dirty using function set_page_dirty() in Snapdragon Auto, Snapdragon Compute, Snapdr | Nov 6, 2019 | 8.1 | 33 | NO | YES |
CVE-2018-11945CRITICAL Improper input validation in wireless service messaging module for data received from broadcast messages can lead to heap overflow in Snapdragon Auto, Snapdragon Compute, Snapdrago | Feb 25, 2019 | 9.8 | 32 | NO | NO |
CVE-2020-11168CRITICAL u'Null-pointer dereference can occur while accessing data buffer beyond its size that leads to access the buffer beyond its range' in Snapdragon Auto, Snapdragon Compute, Snapdrago | Nov 12, 2020 | 9.8 | 31 | NO | NO |
CVE-2019-14062CRITICAL Buffer overflows while decoding setup message from Network due to lack of check of IE message length received from network in Snapdragon Auto, Snapdragon Compute, Snapdragon Consum | Jun 22, 2020 | 9.8 | 31 | NO | NO |
CVE-2019-10532CRITICAL Null-pointer dereference issue can occur while calculating string length when source string length is zero in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Sna | Jan 21, 2020 | 9.8 | 31 | NO | NO |
CVE-2019-10500CRITICAL While processing MT Secondary PDP request, Buffer overflow will happen due to incorrect calculation of buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, | Dec 18, 2019 | 9.8 | 31 | NO | NO |
CVE-2019-10538CRITICAL Lack of check of address range received from firmware response allows modem to respond arbitrary pages into its address range which can compromise HLOS in Snapdragon Auto, Snapdrag | Sep 30, 2019 | 9.8 | 31 | NO | NO |
CVE-2018-13924CRITICAL Lack of check to prevent the buffer length taking negative values can lead to stack overflow. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, | Jul 22, 2019 | 9.8 | 31 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (421 CVEs).
CISA KEV
1 CVE
0.2% of CVEs· 96th percentile
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
1 CVE
0.2% of CVEs· 87th percentile
Social Chatter
Signals from CVEs in this product scope (421 CVEs).
Media Mentions
Signals from CVEs in this product scope (421 CVEs).
Top CNAs Publishing CVEs For Sda660 Firmware
Top CWEs
Versions
No cataloged versions.