# Qualcomm 315 5g Iot Modem Firmware


- [CVE-2023-33107](https://insights.sbomify.com/CVE-2023-33107/): Qualcomm Multiple Chipsets Integer Overflow (high 8.4, exploited in the wild)
- [CVE-2023-33063](https://insights.sbomify.com/CVE-2023-33063/): Qualcomm Multiple Chipsets Use-After-Free (high 7.8, exploited in the wild)
- [CVE-2025-27034](https://insights.sbomify.com/CVE-2025-27034/): Improper Validation of Array Index in Multi-Mode Call Processor (critical 9.8)
- [CVE-2023-22388](https://insights.sbomify.com/CVE-2023-22388/): Use of Out-of-range Pointer Offset in Multi-mode Call Processor (critical 9.8)
- [CVE-2023-28578](https://insights.sbomify.com/CVE-2023-28578/): Improper Input Validation in Services (critical 9.3)
- [CVE-2023-33072](https://insights.sbomify.com/CVE-2023-33072/): Buffer copy without checking size of Input in Core (critical 9.3)
- [CVE-2023-33030](https://insights.sbomify.com/CVE-2023-33030/): Buffer Copy without Checking Size of Input in HLOS (critical 9.3)
- [CVE-2022-33231](https://insights.sbomify.com/CVE-2022-33231/): Double free in Core (critical 9.3)
- [CVE-2022-33288](https://insights.sbomify.com/CVE-2022-33288/): Buffer copy without checking the size of input in Core (critical 9.3)
- [CVE-2023-43551](https://insights.sbomify.com/CVE-2023-43551/): Improper Authentication in Multi-Mode Call Processor (critical 9.1)
- [CVE-2023-33054](https://insights.sbomify.com/CVE-2023-33054/): Improper Authentication in GPS HLOS Driver (critical 9.1)
- [CVE-2023-28540](https://insights.sbomify.com/CVE-2023-28540/): Improper Authentication in Data Modem (critical 9.1)

---
From sbomify Insights: https://insights.sbomify.com/products/qualcomm/315-5g-iot-modem-firmware/