sg8275p firmware vulnerabilities and fixes

Recent CVEs affecting sg8275p firmware, with upgrade or downgrade steps. 3 tracked.

Also searched as: sg8275pfirmware.

sg8275p firmware has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-09-24. Highest priority: CVE-2025-21476 (score 27/100).

• CVE-2025-21476 HIGH 7.8 MITIGATE MITIGATE Memory corruption when passing parameters to the Trusted Virtual Machine during the handshake.
• CVE-2024-33059 MEDIUM 6.7 MITIGATE MITIGATE Memory corruption while processing frame command IOCTL calls.
• CVE-2024-21460 HIGH 7.1 MITIGATE MITIGATE Information disclosure when ASLR relocates the IMEM and Secure DDR portions as one chunk in virtual address sp

FAQ

How do I fix sg8275p firmware vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is sg8275p firmware being exploited right now?

None of the tracked sg8275p firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which sg8275p firmware CVE should I patch first?

CVE-2025-21476 currently ranks highest (27/100): Memory corruption when passing parameters to the Trusted Virtual Machine during the handshake..

RSS feed for sg8275p firmware · ← Back to latest CVEs