# Qualcomm Qcn9002 Firmware


- [CVE-2024-21473](https://insights.sbomify.com/CVE-2024-21473/): Improper Input Validation in WIN SON (critical 9.8)
- [CVE-2023-33028](https://insights.sbomify.com/CVE-2023-33028/): Buffer Copy without Checking Size of Input in WLAN Firmware (critical 9.8)
- [CVE-2022-25748](https://insights.sbomify.com/CVE-2022-25748/): Integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking (critical 9.8)
- [CVE-2023-28578](https://insights.sbomify.com/CVE-2023-28578/): Improper Input Validation in Services (critical 9.3)
- [CVE-2025-27074](https://insights.sbomify.com/CVE-2025-27074/): Incorrect Calculation of Buffer Size in SCE-Mink (high 8.8)
- [CVE-2025-27059](https://insights.sbomify.com/CVE-2025-27059/): Use of Out-of-range Pointer Offset in TZ Firmware (high 8.8)
- [CVE-2025-27060](https://insights.sbomify.com/CVE-2025-27060/): Untrusted Pointer Dereference in TZ Firmware (high 8.8)
- [CVE-2023-33088](https://insights.sbomify.com/CVE-2023-33088/): NULL pointer dereference in WLAN Firmware (high 8.4)
- [CVE-2022-33275](https://insights.sbomify.com/CVE-2022-33275/): Improper validation of array index in WLAN HAL (high 8.4)
- [CVE-2022-40532](https://insights.sbomify.com/CVE-2022-40532/): Integer overflow or wraparound in WLAN (high 8.4)
- [CVE-2022-40531](https://insights.sbomify.com/CVE-2022-40531/): Incorrect type conversion in WLAN (high 8.4)
- [CVE-2022-33277](https://insights.sbomify.com/CVE-2022-33277/): Buffer copy without checking size of input in modem (high 8.4)

---
From sbomify Insights: https://insights.sbomify.com/products/qualcomm/qcn9002-firmware/