# Qualcomm Snapdragon 850 Mobile Compute Platform Firmware


- [CVE-2023-33072](https://insights.sbomify.com/CVE-2023-33072/): Buffer copy without checking size of Input in Core (critical 9.3)
- [CVE-2023-33030](https://insights.sbomify.com/CVE-2023-33030/): Buffer Copy without Checking Size of Input in HLOS (critical 9.3)
- [CVE-2023-21673](https://insights.sbomify.com/CVE-2023-21673/): Improper Access Control in Kernel (high 8.7)
- [CVE-2024-33044](https://insights.sbomify.com/CVE-2024-33044/): Improper Validation of Array Index in Hypervisor (high 8.4)
- [CVE-2024-33056](https://insights.sbomify.com/CVE-2024-33056/): Buffer Over-read in MProc (high 8.4)
- [CVE-2024-21481](https://insights.sbomify.com/CVE-2024-21481/): Improper Restriction of Operations within the Bounds of a Memory Buffer in Hypervisor (high 8.4)
- [CVE-2023-33033](https://insights.sbomify.com/CVE-2023-33033/): Use of Out-of-range Pointer Offset in Audio (high 8.4)
- [CVE-2023-24852](https://insights.sbomify.com/CVE-2023-24852/): Improper Authentication in Core (high 8.4)
- [CVE-2023-28538](https://insights.sbomify.com/CVE-2023-28538/): Stack-based Buffer Overflow in WIN Product (high 8.4)
- [CVE-2022-33307](https://insights.sbomify.com/CVE-2022-33307/): Double free in Automotive (high 8.4)
- [CVE-2022-40507](https://insights.sbomify.com/CVE-2022-40507/): Double free in Core (high 8.4)
- [CVE-2023-21628](https://insights.sbomify.com/CVE-2023-21628/): Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN HAL (high 8.4)

---
From sbomify Insights: https://insights.sbomify.com/products/qualcomm/snapdragon-850-mobile-compute-platform-firmware/