# Qualcomm Snapdragon X72 5g Modem-Rf System Firmware


- [CVE-2025-27034](https://insights.sbomify.com/CVE-2025-27034/): Improper Validation of Array Index in Multi-Mode Call Processor (critical 9.8)
- [CVE-2026-25289](https://insights.sbomify.com/CVE-2026-25289/): Stack-based Buffer Overflow in WLAN Firmware (critical 9.6)
- [CVE-2026-25268](https://insights.sbomify.com/CVE-2026-25268/): Stack-based Buffer Overflow in WLAN Host (high 8.8)
- [CVE-2025-47392](https://insights.sbomify.com/CVE-2025-47392/): Integer Overflow or Wraparound in GPS (high 8.8)
- [CVE-2025-47345](https://insights.sbomify.com/CVE-2025-47345/): Reusing a Nonce, Key Pair in Encryption in Automotive Platform (high 8.4)
- [CVE-2024-33044](https://insights.sbomify.com/CVE-2024-33044/): Improper Validation of Array Index in Hypervisor (high 8.4)
- [CVE-2024-33056](https://insights.sbomify.com/CVE-2024-33056/): Buffer Over-read in MProc (high 8.4)
- [CVE-2024-33060](https://insights.sbomify.com/CVE-2024-33060/): Use After Free in DSP Service (high 8.4)
- [CVE-2024-21481](https://insights.sbomify.com/CVE-2024-21481/): Improper Restriction of Operations within the Bounds of a Memory Buffer in Hypervisor (high 8.4)
- [CVE-2024-33021](https://insights.sbomify.com/CVE-2024-33021/): Use of Uninitialized Variable in Automotive GPU (high 8.4)
- [CVE-2024-33022](https://insights.sbomify.com/CVE-2024-33022/): Integer Overflow or Wraparound in Automotive GPU (high 8.4)
- [CVE-2024-33028](https://insights.sbomify.com/CVE-2024-33028/): Use After Free in Automotive Telematics (high 8.4)

---
From sbomify Insights: https://insights.sbomify.com/products/qualcomm/snapdragon-x72-5g-modem-rf-system-firmware/