# Qualcomm Sxr2350p Firmware


- [CVE-2026-21385](https://insights.sbomify.com/CVE-2026-21385/): Qualcomm Multiple Chipsets Memory Corruption (high 7.8, exploited in the wild)
- [CVE-2026-25289](https://insights.sbomify.com/CVE-2026-25289/): Stack-based Buffer Overflow in WLAN Firmware (critical 9.6)
- [CVE-2025-47345](https://insights.sbomify.com/CVE-2025-47345/): Reusing a Nonce, Key Pair in Encryption in Automotive Platform (high 8.4)
- [CVE-2026-24088](https://insights.sbomify.com/CVE-2026-24088/): Missing Authentication for Critical Function in Boot (high 8.2)
- [CVE-2025-59604](https://insights.sbomify.com/CVE-2025-59604/): NULL Pointer Dereference in SPS Applications (high 7.8)
- [CVE-2025-59606](https://insights.sbomify.com/CVE-2025-59606/): NULL Pointer Dereference in HLOS (high 7.8)
- [CVE-2025-47407](https://insights.sbomify.com/CVE-2025-47407/): Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service (high 7.8)
- [CVE-2026-24082](https://insights.sbomify.com/CVE-2026-24082/): Use After Free in Automotive GPU (high 7.8)
- [CVE-2025-47389](https://insights.sbomify.com/CVE-2025-47389/): Buffer Copy Without Checking Size of Input in Automotive Platform (high 7.8)
- [CVE-2025-47373](https://insights.sbomify.com/CVE-2025-47373/): Out-of-bounds Write in Automotive (high 7.8)
- [CVE-2025-47377](https://insights.sbomify.com/CVE-2025-47377/): Use After Free in Automotive Audio (high 7.8)
- [CVE-2025-47385](https://insights.sbomify.com/CVE-2025-47385/): Improper Access Control for Register Interface in SCE-Mink (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/products/qualcomm/sxr2350p-firmware/