# Qualcomm Sm6370 Firmware


- [CVE-2025-21483](https://insights.sbomify.com/CVE-2025-21483/): Improper Restriction of Operations within the Bounds of a Memory Buffer in Data Network Stack & Connectivity (critical 9.8)
- [CVE-2025-21450](https://insights.sbomify.com/CVE-2025-21450/): Improper Authentication in GPS_GNSS (critical 9.1)
- [CVE-2024-33056](https://insights.sbomify.com/CVE-2024-33056/): Buffer Over-read in MProc (high 8.4)
- [CVE-2024-33035](https://insights.sbomify.com/CVE-2024-33035/): Integer Overflow or Wraparound in Display (high 8.4)
- [CVE-2024-33045](https://insights.sbomify.com/CVE-2024-33045/): Return of Stack Variable Address in Buses (high 8.4)
- [CVE-2024-33060](https://insights.sbomify.com/CVE-2024-33060/): Use After Free in DSP Service (high 8.4)
- [CVE-2024-33023](https://insights.sbomify.com/CVE-2024-33023/): Use After Free in Graphics Linux (high 8.4)
- [CVE-2024-21461](https://insights.sbomify.com/CVE-2024-21461/): Double Free in HLOS (high 8.4)
- [CVE-2024-23373](https://insights.sbomify.com/CVE-2024-23373/): Use After Free in Graphics (high 8.4)
- [CVE-2024-21471](https://insights.sbomify.com/CVE-2024-21471/): Use After Free in Graphics Linux (high 8.4)
- [CVE-2023-28547](https://insights.sbomify.com/CVE-2023-28547/): Buffer Copy Without Checking Size of Input in SPS Applications (high 8.4)
- [CVE-2023-33023](https://insights.sbomify.com/CVE-2023-33023/): Buffer Copy without Checking Size of Input (`Classic Buffer Overflow`) in SPS-Applications (high 8.4)

---
From sbomify Insights: https://insights.sbomify.com/products/qualcomm/sm6370-firmware/