# Qualcomm Smart Audio 400 Platform Firmware


- [CVE-2023-33106](https://insights.sbomify.com/CVE-2023-33106/): Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset (high 8.4, exploited in the wild)
- [CVE-2023-33107](https://insights.sbomify.com/CVE-2023-33107/): Qualcomm Multiple Chipsets Integer Overflow (high 8.4, exploited in the wild)
- [CVE-2026-21385](https://insights.sbomify.com/CVE-2026-21385/): Qualcomm Multiple Chipsets Memory Corruption (high 7.8, exploited in the wild)
- [CVE-2025-27038](https://insights.sbomify.com/CVE-2025-27038/): Qualcomm Multiple Chipsets Use-After-Free (high 7.5, exploited in the wild)
- [CVE-2023-22388](https://insights.sbomify.com/CVE-2023-22388/): Use of Out-of-range Pointer Offset in Multi-mode Call Processor (critical 9.8)
- [CVE-2023-33072](https://insights.sbomify.com/CVE-2023-33072/): Buffer copy without checking size of Input in Core (critical 9.3)
- [CVE-2023-33030](https://insights.sbomify.com/CVE-2023-33030/): Buffer Copy without Checking Size of Input in HLOS (critical 9.3)
- [CVE-2023-33032](https://insights.sbomify.com/CVE-2023-33032/): Integer Overflow or Wraparound in TZ Secure OS (critical 9.3)
- [CVE-2022-33231](https://insights.sbomify.com/CVE-2022-33231/): Double free in Core (critical 9.3)
- [CVE-2024-33056](https://insights.sbomify.com/CVE-2024-33056/): Buffer Over-read in MProc (high 8.4)
- [CVE-2024-33021](https://insights.sbomify.com/CVE-2024-33021/): Use of Uninitialized Variable in Automotive GPU (high 8.4)
- [CVE-2024-33022](https://insights.sbomify.com/CVE-2024-33022/): Integer Overflow or Wraparound in Automotive GPU (high 8.4)

---
From sbomify Insights: https://insights.sbomify.com/products/qualcomm/smart-audio-400-platform-firmware/