# Qualcomm Smart Audio 400 Firmware


- [CVE-2023-28578](https://insights.sbomify.com/CVE-2023-28578/): Improper Input Validation in Services (critical 9.3)
- [CVE-2023-43551](https://insights.sbomify.com/CVE-2023-43551/): Improper Authentication in Multi-Mode Call Processor (critical 9.1)
- [CVE-2024-33045](https://insights.sbomify.com/CVE-2024-33045/): Return of Stack Variable Address in Buses (high 8.4)
- [CVE-2024-33060](https://insights.sbomify.com/CVE-2024-33060/): Use After Free in DSP Service (high 8.4)
- [CVE-2024-21471](https://insights.sbomify.com/CVE-2024-21471/): Use After Free in Graphics Linux (high 8.4)
- [CVE-2023-28547](https://insights.sbomify.com/CVE-2023-28547/): Buffer Copy Without Checking Size of Input in SPS Applications (high 8.4)
- [CVE-2023-33023](https://insights.sbomify.com/CVE-2023-33023/): Buffer Copy without Checking Size of Input (`Classic Buffer Overflow`) in SPS-Applications (high 8.4)
- [CVE-2024-21468](https://insights.sbomify.com/CVE-2024-21468/): Use After Free in Kernel (high 8.4)
- [CVE-2023-33066](https://insights.sbomify.com/CVE-2023-33066/): Use of Out-of-range Pointer Offset in Audio (high 8.4)
- [CVE-2023-43546](https://insights.sbomify.com/CVE-2023-43546/): Use After Free in Automotive Multimedia (high 8.4)
- [CVE-2023-43547](https://insights.sbomify.com/CVE-2023-43547/): Use After Free in Automotive Multimedia (high 8.4)
- [CVE-2023-33021](https://insights.sbomify.com/CVE-2023-33021/): Use After Free in Graphics (high 8.4)

---
From sbomify Insights: https://insights.sbomify.com/products/qualcomm/smart-audio-400-firmware/