# Qualcomm Sm4375 Firmware


- [CVE-2023-33063](https://insights.sbomify.com/CVE-2023-33063/): Qualcomm Multiple Chipsets Use-After-Free (high 7.8, exploited in the wild)
- [CVE-2022-40510](https://insights.sbomify.com/CVE-2022-40510/): Buffer copy without checking size of input in Audio. (critical 9.8)
- [CVE-2022-22088](https://insights.sbomify.com/CVE-2022-22088/): Integer Overflow to Buffer Overflow in Bluetooth HOST (critical 9.8)
- [CVE-2022-25748](https://insights.sbomify.com/CVE-2022-25748/): Integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking (critical 9.8)
- [CVE-2023-21651](https://insights.sbomify.com/CVE-2023-21651/): Incorrect Type Conversion or Cast in Core (critical 9.3)
- [CVE-2022-33231](https://insights.sbomify.com/CVE-2022-33231/): Double free in Core (critical 9.3)
- [CVE-2023-33054](https://insights.sbomify.com/CVE-2023-33054/): Improper Authentication in GPS HLOS Driver (critical 9.1)
- [CVE-2023-28540](https://insights.sbomify.com/CVE-2023-28540/): Improper Authentication in Data Modem (critical 9.1)
- [CVE-2023-33022](https://insights.sbomify.com/CVE-2023-33022/): Integer Overflow to Buffer Overflow in HLOS (high 8.4)
- [CVE-2023-33029](https://insights.sbomify.com/CVE-2023-33029/): Use After Free in DSP Service (high 8.4)
- [CVE-2022-33275](https://insights.sbomify.com/CVE-2022-33275/): Improper validation of array index in WLAN HAL (high 8.4)
- [CVE-2023-22666](https://insights.sbomify.com/CVE-2023-22666/): Integer Overflow or Wraparound in Audio (high 8.4)

---
From sbomify Insights: https://insights.sbomify.com/products/qualcomm/sm4375-firmware/