# Qualcomm Snapdragon X72 5g Modem-Rf Firmware


- [CVE-2024-45569](https://insights.sbomify.com/CVE-2024-45569/): Improper Validation of Array Index in WLAN Host Communication (critical 9.8)
- [CVE-2025-21450](https://insights.sbomify.com/CVE-2025-21450/): Improper Authentication in GPS_GNSS (critical 9.1)
- [CVE-2024-38420](https://insights.sbomify.com/CVE-2024-38420/): Improper Input Validation in Hypervisor (high 8.8)
- [CVE-2023-33119](https://insights.sbomify.com/CVE-2023-33119/): Time-of-check Time-of-use (TOCTOU) Race Condition in Hypervisor (high 8.4)
- [CVE-2023-43531](https://insights.sbomify.com/CVE-2023-43531/): Access of Uninitialized Pointer in SPS Applications (high 8.4)
- [CVE-2024-49838](https://insights.sbomify.com/CVE-2024-49838/): Buffer Over-read in WLAN HOST (high 8.2)
- [CVE-2024-49839](https://insights.sbomify.com/CVE-2024-49839/): Buffer Over-read in WLAN Host Cmn (high 8.2)
- [CVE-2026-24082](https://insights.sbomify.com/CVE-2026-24082/): Use After Free in Automotive GPU (high 7.8)
- [CVE-2025-21432](https://insights.sbomify.com/CVE-2025-21432/): Double Free in SPS-HLOS (high 7.8)
- [CVE-2025-27042](https://insights.sbomify.com/CVE-2025-27042/): Incorrect Calculation of Buffer Size in Video (high 7.8)
- [CVE-2025-27043](https://insights.sbomify.com/CVE-2025-27043/): Buffer Copy Without Checking Size of Input in Video (high 7.8)
- [CVE-2025-27052](https://insights.sbomify.com/CVE-2025-27052/): Buffer Copy Without Checking Size of Input in Core Services (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/products/qualcomm/snapdragon-x72-5g-modem-rf-firmware/