# Qualcomm Snapdragon 855\+\/860 Mobile Platform Firmware


- [CVE-2023-33107](https://insights.sbomify.com/CVE-2023-33107/): Qualcomm Multiple Chipsets Integer Overflow (high 8.4, exploited in the wild)
- [CVE-2023-22388](https://insights.sbomify.com/CVE-2023-22388/): Use of Out-of-range Pointer Offset in Multi-mode Call Processor (critical 9.8)
- [CVE-2023-33072](https://insights.sbomify.com/CVE-2023-33072/): Buffer copy without checking size of Input in Core (critical 9.3)
- [CVE-2023-33030](https://insights.sbomify.com/CVE-2023-33030/): Buffer Copy without Checking Size of Input in HLOS (critical 9.3)
- [CVE-2023-33032](https://insights.sbomify.com/CVE-2023-33032/): Integer Overflow or Wraparound in TZ Secure OS (critical 9.3)
- [CVE-2023-33033](https://insights.sbomify.com/CVE-2023-33033/): Use of Out-of-range Pointer Offset in Audio (high 8.4)
- [CVE-2023-33114](https://insights.sbomify.com/CVE-2023-33114/): Use after free in Neural Processing Unit (high 8.4)
- [CVE-2023-33088](https://insights.sbomify.com/CVE-2023-33088/): NULL pointer dereference in WLAN Firmware (high 8.4)
- [CVE-2023-33092](https://insights.sbomify.com/CVE-2023-33092/): Buffer Copy Without Checking Size of Input in Bluetooth HOST (high 8.4)
- [CVE-2023-24852](https://insights.sbomify.com/CVE-2023-24852/): Improper Authentication in Core (high 8.4)
- [CVE-2024-38408](https://insights.sbomify.com/CVE-2024-38408/): Cryptographic Issues in BT Controller (high 8.2)
- [CVE-2023-28585](https://insights.sbomify.com/CVE-2023-28585/): Integer Overflow to Buffer Overflow in TZ Secure OS (high 8.2)

---
From sbomify Insights: https://insights.sbomify.com/products/qualcomm/snapdragon-855%5C+%5C/860-mobile-platform-firmware/