# Qualcomm Sdx61 Firmware


- [CVE-2026-21385](https://insights.sbomify.com/CVE-2026-21385/): Qualcomm Multiple Chipsets Memory Corruption (high 7.8, exploited in the wild)
- [CVE-2025-27034](https://insights.sbomify.com/CVE-2025-27034/): Improper Validation of Array Index in Multi-Mode Call Processor (critical 9.8)
- [CVE-2025-21450](https://insights.sbomify.com/CVE-2025-21450/): Improper Authentication in GPS_GNSS (critical 9.1)
- [CVE-2026-25268](https://insights.sbomify.com/CVE-2026-25268/): Stack-based Buffer Overflow in WLAN Host (high 8.8)
- [CVE-2025-47392](https://insights.sbomify.com/CVE-2025-47392/): Integer Overflow or Wraparound in GPS (high 8.8)
- [CVE-2024-33056](https://insights.sbomify.com/CVE-2024-33056/): Buffer Over-read in MProc (high 8.4)
- [CVE-2024-33045](https://insights.sbomify.com/CVE-2024-33045/): Return of Stack Variable Address in Buses (high 8.4)
- [CVE-2024-33060](https://insights.sbomify.com/CVE-2024-33060/): Use After Free in DSP Service (high 8.4)
- [CVE-2024-49838](https://insights.sbomify.com/CVE-2024-49838/): Buffer Over-read in WLAN HOST (high 8.2)
- [CVE-2024-38408](https://insights.sbomify.com/CVE-2024-38408/): Cryptographic Issues in BT Controller (high 8.2)
- [CVE-2024-23359](https://insights.sbomify.com/CVE-2024-23359/): Buffer Over-read in Multi Mode Call Processor (high 8.2)
- [CVE-2026-24079](https://insights.sbomify.com/CVE-2026-24079/): Missing Authentication for Critical Function in Data Modem (high 8.1)

---
From sbomify Insights: https://insights.sbomify.com/products/qualcomm/sdx61-firmware/