# Qualcomm Snapdragon 8cx Compute Platform Firmware


- [CVE-2023-22388](https://insights.sbomify.com/CVE-2023-22388/): Use of Out-of-range Pointer Offset in Multi-mode Call Processor (critical 9.8)
- [CVE-2023-33072](https://insights.sbomify.com/CVE-2023-33072/): Buffer copy without checking size of Input in Core (critical 9.3)
- [CVE-2023-33030](https://insights.sbomify.com/CVE-2023-33030/): Buffer Copy without Checking Size of Input in HLOS (critical 9.3)
- [CVE-2023-33032](https://insights.sbomify.com/CVE-2023-33032/): Integer Overflow or Wraparound in TZ Secure OS (critical 9.3)
- [CVE-2024-33044](https://insights.sbomify.com/CVE-2024-33044/): Improper Validation of Array Index in Hypervisor (high 8.4)
- [CVE-2024-33056](https://insights.sbomify.com/CVE-2024-33056/): Buffer Over-read in MProc (high 8.4)
- [CVE-2023-33033](https://insights.sbomify.com/CVE-2023-33033/): Use of Out-of-range Pointer Offset in Audio (high 8.4)
- [CVE-2023-24852](https://insights.sbomify.com/CVE-2023-24852/): Improper Authentication in Core (high 8.4)
- [CVE-2023-28545](https://insights.sbomify.com/CVE-2023-28545/): Improper Restriction of Operations within the Bounds of a Memory Buffer in TZ Secure OS (high 8.2)
- [CVE-2026-25267](https://insights.sbomify.com/CVE-2026-25267/): Missing Authorization in Core (high 7.8)
- [CVE-2026-24075](https://insights.sbomify.com/CVE-2026-24075/): Buffer Over-read in Qualcomm IPC (high 7.8)
- [CVE-2026-21379](https://insights.sbomify.com/CVE-2026-21379/): Buffer Over-read in Windows Compute (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/products/qualcomm/snapdragon-8cx-compute-platform-firmware/