# Qualcomm Sm8650q Firmware


- [CVE-2025-21479](https://insights.sbomify.com/CVE-2025-21479/): Qualcomm Multiple Chipsets Incorrect Authorization (high 8.6, exploited in the wild)
- [CVE-2025-21480](https://insights.sbomify.com/CVE-2025-21480/): Qualcomm Multiple Chipsets Incorrect Authorization (high 8.6, exploited in the wild)
- [CVE-2026-21385](https://insights.sbomify.com/CVE-2026-21385/): Qualcomm Multiple Chipsets Memory Corruption (high 7.8, exploited in the wild)
- [CVE-2025-21483](https://insights.sbomify.com/CVE-2025-21483/): Improper Restriction of Operations within the Bounds of a Memory Buffer in Data Network Stack & Connectivity (critical 9.8)
- [CVE-2025-27034](https://insights.sbomify.com/CVE-2025-27034/): Improper Validation of Array Index in Multi-Mode Call Processor (critical 9.8)
- [CVE-2026-25289](https://insights.sbomify.com/CVE-2026-25289/): Stack-based Buffer Overflow in WLAN Firmware (critical 9.6)
- [CVE-2025-21450](https://insights.sbomify.com/CVE-2025-21450/): Improper Authentication in GPS_GNSS (critical 9.1)
- [CVE-2026-25276](https://insights.sbomify.com/CVE-2026-25276/): Improper Validation of Array Index in Secure Processor (high 8.8)
- [CVE-2026-25277](https://insights.sbomify.com/CVE-2026-25277/): Buffer Copy Without Checking Size of Input in Secure Processor (high 8.8)
- [CVE-2025-47392](https://insights.sbomify.com/CVE-2025-47392/): Integer Overflow or Wraparound in GPS (high 8.8)
- [CVE-2025-47345](https://insights.sbomify.com/CVE-2025-47345/): Reusing a Nonce, Key Pair in Encryption in Automotive Platform (high 8.4)
- [CVE-2026-24088](https://insights.sbomify.com/CVE-2026-24088/): Missing Authentication for Critical Function in Boot (high 8.2)

---
From sbomify Insights: https://insights.sbomify.com/products/qualcomm/sm8650q-firmware/