# Qualcomm Snapdragon X75 5g Modem-Rf Firmware


- [CVE-2024-45569](https://insights.sbomify.com/CVE-2024-45569/): Improper Validation of Array Index in WLAN Host Communication (critical 9.8)
- [CVE-2024-21473](https://insights.sbomify.com/CVE-2024-21473/): Improper Input Validation in WIN SON (critical 9.8)
- [CVE-2023-28582](https://insights.sbomify.com/CVE-2023-28582/): Buffer Copy Without Checking Size of Input in Data Modem (critical 9.8)
- [CVE-2023-43552](https://insights.sbomify.com/CVE-2023-43552/): Use After Free in WLAN Host Communication (critical 9.8)
- [CVE-2023-43553](https://insights.sbomify.com/CVE-2023-43553/): Use of Out-of-range Pointer Offset in WLAN HOST (critical 9.8)
- [CVE-2023-43538](https://insights.sbomify.com/CVE-2023-43538/): Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in TZ Secure OS (critical 9.3)
- [CVE-2025-21450](https://insights.sbomify.com/CVE-2025-21450/): Improper Authentication in GPS_GNSS (critical 9.1)
- [CVE-2023-43551](https://insights.sbomify.com/CVE-2023-43551/): Improper Authentication in Multi-Mode Call Processor (critical 9.1)
- [CVE-2024-38420](https://insights.sbomify.com/CVE-2024-38420/): Improper Input Validation in Hypervisor (high 8.8)
- [CVE-2023-33119](https://insights.sbomify.com/CVE-2023-33119/): Time-of-check Time-of-use (TOCTOU) Race Condition in Hypervisor (high 8.4)
- [CVE-2023-43531](https://insights.sbomify.com/CVE-2023-43531/): Access of Uninitialized Pointer in SPS Applications (high 8.4)
- [CVE-2023-28547](https://insights.sbomify.com/CVE-2023-28547/): Buffer Copy Without Checking Size of Input in SPS Applications (high 8.4)

---
From sbomify Insights: https://insights.sbomify.com/products/qualcomm/snapdragon-x75-5g-modem-rf-firmware/