# Qualcomm Snapdragon 8 Gen 2 Mobile Firmware


- [CVE-2024-45569](https://insights.sbomify.com/CVE-2024-45569/): Improper Validation of Array Index in WLAN Host Communication (critical 9.8)
- [CVE-2023-28582](https://insights.sbomify.com/CVE-2023-28582/): Buffer Copy Without Checking Size of Input in Data Modem (critical 9.8)
- [CVE-2023-43552](https://insights.sbomify.com/CVE-2023-43552/): Use After Free in WLAN Host Communication (critical 9.8)
- [CVE-2023-43553](https://insights.sbomify.com/CVE-2023-43553/): Use of Out-of-range Pointer Offset in WLAN HOST (critical 9.8)
- [CVE-2023-43538](https://insights.sbomify.com/CVE-2023-43538/): Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in TZ Secure OS (critical 9.3)
- [CVE-2023-28578](https://insights.sbomify.com/CVE-2023-28578/): Improper Input Validation in Services (critical 9.3)
- [CVE-2023-43551](https://insights.sbomify.com/CVE-2023-43551/): Improper Authentication in Multi-Mode Call Processor (critical 9.1)
- [CVE-2024-33060](https://insights.sbomify.com/CVE-2024-33060/): Use After Free in DSP Service (high 8.4)
- [CVE-2023-33119](https://insights.sbomify.com/CVE-2023-33119/): Time-of-check Time-of-use (TOCTOU) Race Condition in Hypervisor (high 8.4)
- [CVE-2023-43531](https://insights.sbomify.com/CVE-2023-43531/): Access of Uninitialized Pointer in SPS Applications (high 8.4)
- [CVE-2024-21471](https://insights.sbomify.com/CVE-2024-21471/): Use After Free in Graphics Linux (high 8.4)
- [CVE-2024-23351](https://insights.sbomify.com/CVE-2024-23351/): Improper Access Control in Graphics Linux (high 8.4)

---
From sbomify Insights: https://insights.sbomify.com/products/qualcomm/snapdragon-8-gen-2-mobile-firmware/