# Qualcomm Sc8380xp Firmware


- [CVE-2025-21480](https://insights.sbomify.com/CVE-2025-21480/): Qualcomm Multiple Chipsets Incorrect Authorization (high 8.6, exploited in the wild)
- [CVE-2026-21385](https://insights.sbomify.com/CVE-2026-21385/): Qualcomm Multiple Chipsets Memory Corruption (high 7.8, exploited in the wild)
- [CVE-2023-33045](https://insights.sbomify.com/CVE-2023-33045/): Buffer Copy Without Checking Size of Input in WLAN Firmware (critical 9.8)
- [CVE-2026-25289](https://insights.sbomify.com/CVE-2026-25289/): Stack-based Buffer Overflow in WLAN Firmware (critical 9.6)
- [CVE-2023-43538](https://insights.sbomify.com/CVE-2023-43538/): Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in TZ Secure OS (critical 9.3)
- [CVE-2023-28578](https://insights.sbomify.com/CVE-2023-28578/): Improper Input Validation in Services (critical 9.3)
- [CVE-2023-33072](https://insights.sbomify.com/CVE-2023-33072/): Buffer copy without checking size of Input in Core (critical 9.3)
- [CVE-2023-28574](https://insights.sbomify.com/CVE-2023-28574/): Improper Input Validation in Core (critical 9.0)
- [CVE-2024-38420](https://insights.sbomify.com/CVE-2024-38420/): Improper Input Validation in Hypervisor (high 8.8)
- [CVE-2025-47345](https://insights.sbomify.com/CVE-2025-47345/): Reusing a Nonce, Key Pair in Encryption in Automotive Platform (high 8.4)
- [CVE-2024-33044](https://insights.sbomify.com/CVE-2024-33044/): Improper Validation of Array Index in Hypervisor (high 8.4)
- [CVE-2024-33056](https://insights.sbomify.com/CVE-2024-33056/): Buffer Over-read in MProc (high 8.4)

---
From sbomify Insights: https://insights.sbomify.com/products/qualcomm/sc8380xp-firmware/