# Qualcomm Sm8475 Firmware


- [CVE-2023-33063](https://insights.sbomify.com/CVE-2023-33063/): Qualcomm Multiple Chipsets Use-After-Free (high 7.8, exploited in the wild)
- [CVE-2023-33028](https://insights.sbomify.com/CVE-2023-33028/): Buffer Copy without Checking Size of Input in WLAN Firmware (critical 9.8)
- [CVE-2022-22096](https://insights.sbomify.com/CVE-2022-22096/): Memory corruption in Snapdragon Connectivity, Snapdragon Mobile (critical 9.8)
- [CVE-2022-33231](https://insights.sbomify.com/CVE-2022-33231/): Double free in Core (critical 9.3)
- [CVE-2023-33054](https://insights.sbomify.com/CVE-2023-33054/): Improper Authentication in GPS HLOS Driver (critical 9.1)
- [CVE-2023-28540](https://insights.sbomify.com/CVE-2023-28540/): Improper Authentication in Data Modem (critical 9.1)
- [CVE-2023-33074](https://insights.sbomify.com/CVE-2023-33074/): Use After Free in Audio (high 8.4)
- [CVE-2023-33029](https://insights.sbomify.com/CVE-2023-33029/): Use After Free in DSP Service (high 8.4)
- [CVE-2022-33275](https://insights.sbomify.com/CVE-2022-33275/): Improper validation of array index in WLAN HAL (high 8.4)
- [CVE-2022-40507](https://insights.sbomify.com/CVE-2022-40507/): Double free in Core (high 8.4)
- [CVE-2023-21630](https://insights.sbomify.com/CVE-2023-21630/): Integer Overflow in Multimedia Framework (high 8.4)
- [CVE-2022-22066](https://insights.sbomify.com/CVE-2022-22066/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables (high 8.4)

---
From sbomify Insights: https://insights.sbomify.com/products/qualcomm/sm8475-firmware/