# Qualcomm Snapdragon Ar2 Gen 1 Firmware


- [CVE-2023-43552](https://insights.sbomify.com/CVE-2023-43552/): Use After Free in WLAN Host Communication (critical 9.8)
- [CVE-2023-43553](https://insights.sbomify.com/CVE-2023-43553/): Use of Out-of-range Pointer Offset in WLAN HOST (critical 9.8)
- [CVE-2023-28581](https://insights.sbomify.com/CVE-2023-28581/): Improper Restriction of Operations within the Bounds of a Memory Buffer in WLAN Firmware (critical 9.8)
- [CVE-2023-43538](https://insights.sbomify.com/CVE-2023-43538/): Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in TZ Secure OS (critical 9.3)
- [CVE-2023-43556](https://insights.sbomify.com/CVE-2023-43556/): Buffer Copy Without Checking Size of Input in Hypervisor (critical 9.3)
- [CVE-2023-28578](https://insights.sbomify.com/CVE-2023-28578/): Improper Input Validation in Services (critical 9.3)
- [CVE-2024-38420](https://insights.sbomify.com/CVE-2024-38420/): Improper Input Validation in Hypervisor (high 8.8)
- [CVE-2024-33045](https://insights.sbomify.com/CVE-2024-33045/): Return of Stack Variable Address in Buses (high 8.4)
- [CVE-2024-33060](https://insights.sbomify.com/CVE-2024-33060/): Use After Free in DSP Service (high 8.4)
- [CVE-2023-33119](https://insights.sbomify.com/CVE-2023-33119/): Time-of-check Time-of-use (TOCTOU) Race Condition in Hypervisor (high 8.4)
- [CVE-2023-43531](https://insights.sbomify.com/CVE-2023-43531/): Access of Uninitialized Pointer in SPS Applications (high 8.4)
- [CVE-2024-21471](https://insights.sbomify.com/CVE-2024-21471/): Use After Free in Graphics Linux (high 8.4)

---
From sbomify Insights: https://insights.sbomify.com/products/qualcomm/snapdragon-ar2-gen-1-firmware/