# Qualcomm Sg8275p Firmware


- [CVE-2023-33106](https://insights.sbomify.com/CVE-2023-33106/): Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset (high 8.4, exploited in the wild)
- [CVE-2023-33107](https://insights.sbomify.com/CVE-2023-33107/): Qualcomm Multiple Chipsets Integer Overflow (high 8.4, exploited in the wild)
- [CVE-2023-33063](https://insights.sbomify.com/CVE-2023-33063/): Qualcomm Multiple Chipsets Use-After-Free (high 7.8, exploited in the wild)
- [CVE-2025-27034](https://insights.sbomify.com/CVE-2025-27034/): Improper Validation of Array Index in Multi-Mode Call Processor (critical 9.8)
- [CVE-2023-43552](https://insights.sbomify.com/CVE-2023-43552/): Use After Free in WLAN Host Communication (critical 9.8)
- [CVE-2023-22388](https://insights.sbomify.com/CVE-2023-22388/): Use of Out-of-range Pointer Offset in Multi-mode Call Processor (critical 9.8)
- [CVE-2023-24855](https://insights.sbomify.com/CVE-2023-24855/): Use of Out-of-range Pointer Offset in Modem (critical 9.8)
- [CVE-2023-33028](https://insights.sbomify.com/CVE-2023-33028/): Buffer Copy without Checking Size of Input in WLAN Firmware (critical 9.8)
- [CVE-2023-43538](https://insights.sbomify.com/CVE-2023-43538/): Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in TZ Secure OS (critical 9.3)
- [CVE-2023-28578](https://insights.sbomify.com/CVE-2023-28578/): Improper Input Validation in Services (critical 9.3)
- [CVE-2023-33072](https://insights.sbomify.com/CVE-2023-33072/): Buffer copy without checking size of Input in Core (critical 9.3)
- [CVE-2025-21450](https://insights.sbomify.com/CVE-2025-21450/): Improper Authentication in GPS_GNSS (critical 9.1)

---
From sbomify Insights: https://insights.sbomify.com/products/qualcomm/sg8275p-firmware/