# Qualcomm Snapdragon 888 5g Mobile Firmware


- [CVE-2024-43047](https://insights.sbomify.com/CVE-2024-43047/): Qualcomm Multiple Chipsets Use-After-Free (high 7.8, exploited in the wild)
- [CVE-2023-43538](https://insights.sbomify.com/CVE-2023-43538/): Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in TZ Secure OS (critical 9.3)
- [CVE-2023-43556](https://insights.sbomify.com/CVE-2023-43556/): Buffer Copy Without Checking Size of Input in Hypervisor (critical 9.3)
- [CVE-2023-28578](https://insights.sbomify.com/CVE-2023-28578/): Improper Input Validation in Services (critical 9.3)
- [CVE-2025-21450](https://insights.sbomify.com/CVE-2025-21450/): Improper Authentication in GPS_GNSS (critical 9.1)
- [CVE-2023-43551](https://insights.sbomify.com/CVE-2023-43551/): Improper Authentication in Multi-Mode Call Processor (critical 9.1)
- [CVE-2024-38420](https://insights.sbomify.com/CVE-2024-38420/): Improper Input Validation in Hypervisor (high 8.8)
- [CVE-2024-33060](https://insights.sbomify.com/CVE-2024-33060/): Use After Free in DSP Service (high 8.4)
- [CVE-2023-33119](https://insights.sbomify.com/CVE-2023-33119/): Time-of-check Time-of-use (TOCTOU) Race Condition in Hypervisor (high 8.4)
- [CVE-2023-43531](https://insights.sbomify.com/CVE-2023-43531/): Access of Uninitialized Pointer in SPS Applications (high 8.4)
- [CVE-2024-21471](https://insights.sbomify.com/CVE-2024-21471/): Use After Free in Graphics Linux (high 8.4)
- [CVE-2023-28547](https://insights.sbomify.com/CVE-2023-28547/): Buffer Copy Without Checking Size of Input in SPS Applications (high 8.4)

---
From sbomify Insights: https://insights.sbomify.com/products/qualcomm/snapdragon-888-5g-mobile-firmware/