# Qualcomm Sdx57m Firmware


- [CVE-2025-27034](https://insights.sbomify.com/CVE-2025-27034/): Improper Validation of Array Index in Multi-Mode Call Processor (critical 9.8)
- [CVE-2023-22388](https://insights.sbomify.com/CVE-2023-22388/): Use of Out-of-range Pointer Offset in Multi-mode Call Processor (critical 9.8)
- [CVE-2023-24855](https://insights.sbomify.com/CVE-2023-24855/): Use of Out-of-range Pointer Offset in Modem (critical 9.8)
- [CVE-2022-33256](https://insights.sbomify.com/CVE-2022-33256/): Improper validation of array index in Multi-mode call processor (critical 9.8)
- [CVE-2023-43538](https://insights.sbomify.com/CVE-2023-43538/): Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in TZ Secure OS (critical 9.3)
- [CVE-2023-43556](https://insights.sbomify.com/CVE-2023-43556/): Buffer Copy Without Checking Size of Input in Hypervisor (critical 9.3)
- [CVE-2023-28578](https://insights.sbomify.com/CVE-2023-28578/): Improper Input Validation in Services (critical 9.3)
- [CVE-2023-33072](https://insights.sbomify.com/CVE-2023-33072/): Buffer copy without checking size of Input in Core (critical 9.3)
- [CVE-2023-33030](https://insights.sbomify.com/CVE-2023-33030/): Buffer Copy without Checking Size of Input in HLOS (critical 9.3)
- [CVE-2023-21651](https://insights.sbomify.com/CVE-2023-21651/): Incorrect Type Conversion or Cast in Core (critical 9.3)
- [CVE-2022-33231](https://insights.sbomify.com/CVE-2022-33231/): Double free in Core (critical 9.3)
- [CVE-2022-33269](https://insights.sbomify.com/CVE-2022-33269/): Integer overflow or wraparound in Core (critical 9.3)

---
From sbomify Insights: https://insights.sbomify.com/products/qualcomm/sdx57m-firmware/