# Qualcomm Snapdragon Ar2 Gen 1 Platform Firmware


- [CVE-2023-33106](https://insights.sbomify.com/CVE-2023-33106/): Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset (high 8.4, exploited in the wild)
- [CVE-2023-33107](https://insights.sbomify.com/CVE-2023-33107/): Qualcomm Multiple Chipsets Integer Overflow (high 8.4, exploited in the wild)
- [CVE-2023-33063](https://insights.sbomify.com/CVE-2023-33063/): Qualcomm Multiple Chipsets Use-After-Free (high 7.8, exploited in the wild)
- [CVE-2023-33045](https://insights.sbomify.com/CVE-2023-33045/): Buffer Copy Without Checking Size of Input in WLAN Firmware (critical 9.8)
- [CVE-2023-33028](https://insights.sbomify.com/CVE-2023-33028/): Buffer Copy without Checking Size of Input in WLAN Firmware (critical 9.8)
- [CVE-2023-33072](https://insights.sbomify.com/CVE-2023-33072/): Buffer copy without checking size of Input in Core (critical 9.3)
- [CVE-2023-33030](https://insights.sbomify.com/CVE-2023-33030/): Buffer Copy without Checking Size of Input in HLOS (critical 9.3)
- [CVE-2022-33231](https://insights.sbomify.com/CVE-2022-33231/): Double free in Core (critical 9.3)
- [CVE-2022-33269](https://insights.sbomify.com/CVE-2022-33269/): Integer overflow or wraparound in Core (critical 9.3)
- [CVE-2022-33288](https://insights.sbomify.com/CVE-2022-33288/): Buffer copy without checking the size of input in Core (critical 9.3)
- [CVE-2023-28574](https://insights.sbomify.com/CVE-2023-28574/): Improper Input Validation in Core (critical 9.0)
- [CVE-2023-21673](https://insights.sbomify.com/CVE-2023-21673/): Improper Access Control in Kernel (high 8.7)

---
From sbomify Insights: https://insights.sbomify.com/products/qualcomm/snapdragon-ar2-gen-1-platform-firmware/
