Qualcomm Fsm10055 vulnerabilities

• qualcomm 315 5g iot modem firmware, ar8035 firmware, fastconnect 6200 firmware +78 more +80 more Reachable Assertion in Modem CVE-2025-21452 7.5 HighAugust 6, 2025
• qualcomm 315 5g iot firmware, aqt1000 firmware, ar8031 firmware +342 more +344 more Out-of-bounds Write in Video CVE-2025-27061 Fix available 7.8 HighJuly 8, 2025
• qualcomm 215 mobile firmware, 315 5g iot modem firmware, aqt1000 firmware +342 more +344 more Incorrect Calculation of Buffer Size in Video CVE-2025-27042 Fix available 7.8 HighJuly 8, 2025
• qualcomm 205 mobile platform firmware, 315 5g iot modem firmware, 9205 lte modem firmware +327 more +329 more Buffer Over-read in MProc CVE-2024-33056 8.4 HighDecember 2, 2024
• qualcomm 205 mobile platform firmware, apq8017 firmware, apq8037 firmware +92 more +94 more Reachable Assertion in Modem CVE-2024-23385 7.5 HighNovember 4, 2024
• qualcomm ar8035 firmware, csra6620 firmware, csra6640 firmware +200 more +202 more Return of Stack Variable Address in Buses CVE-2024-33045 Fix available 8.4 HighSeptember 1, 2024
• qualcomm apq8064au firmware, aqt1000 firmware, ar8035 firmware +341 more +343 more Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Qualcomm IPC CVE-2024-23368 Fix available 7.8 HighJuly 1, 2024
• qualcomm 215 mobile firmware, 315 5g iot modem firmware, aqt1000 firmware +234 more +236 more Use of Out-of-range Pointer Offset in Video CVE-2024-21475 Fix available 7.8 HighMay 1, 2024
• qualcomm 315 5g iot modem firmware, aqt1000 firmware, ar8031 firmware +384 more +386 more Improper Input Validation in Services CVE-2023-28578 9.3 CriticalMarch 4, 2024
• qualcomm 315 5g iot modem firmware, 9205 lte modem firmware, 9206 lte modem firmware +246 more +248 more Improper Restriction of Operations within the Bounds of a Memory Buffer in UTILS CVE-2023-28551 7.8 HighDecember 5, 2023
• qualcomm 315 5g iot modem firmware, 9205 lte modem firmware, 9206 lte modem firmware +333 more +335 more Improper Restriction of Operations within the Bounds of a Memory Buffer in MPP Performance CVE-2023-28550 7.8 HighDecember 5, 2023
• qualcomm 315 5g iot modem firmware, aqt1000 firmware, ar8031 firmware +255 more +257 more NULL pointer Dereference in Modem CVE-2023-24847 7.5 HighOctober 3, 2023
• qualcomm 315 5g iot modem firmware, 8905 firmware, 8909 firmware +187 more +189 more Reachable assertion in Modem CVE-2022-40504 7.5 HighMay 2, 2023
• qualcomm apq8009 firmware, apq8009w firmware, apq8017 firmware +207 more +209 more Memory Corruption in MODEM CVE-2022-33213 7.5 HighMarch 7, 2023
• qualcomm apq8009 firmware, apq8009w firmware, apq8017 firmware +199 more +201 more Configuration weakness in modem CVE-2022-33233 7.8 HighFebruary 9, 2023
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +77 more +79 more Denial of service in modem due to reachable assertion while processing reconfiguration message in... CVE-2022-25702 7.5 HighDecember 13, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +195 more +197 more Memory corruption in MODEM due to Improper Validation of Array Index while processing GSTK... CVE-2022-25695 8.4 HighDecember 13, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009w firmware, apq8017 firmware +174 more +176 more Possible buffer overflow due to improper parsing of headers while playing the FLAC audio clip in... CVE-2021-35104 9.8 CriticalJune 14, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009w firmware, apq8017 firmware +118 more +120 more Possible buffer over read due to improper calculation of string length while parsing Id3 tag in... CVE-2021-35100 7.5 HighJune 14, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8031 firmware +139 more +141 more Improper access control sequence for AC database after memory allocation can lead to possible... CVE-2021-30349 8.2 HighJune 14, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8009w firmware, apq8017 firmware +93 more +95 more Improper integrity check can lead to race condition between tasks PDCP and RRC? after a valid RRC... CVE-2021-30342 9.1 CriticalJune 14, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8031 firmware +145 more +147 more XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX in Snapdragon Auto, Snapdragon Compute, Snapdragon... CVE-2021-30281 8.4 HighJune 14, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm ar8035 firmware, fsm10055 firmware +75 more +77 more Possible buffer overflow due to improper data validation of external commands sent via DIAG... CVE-2021-30331 5.5 MediumApril 1, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8031 firmware +109 more +111 more Improper handling of permissions of a shared memory region can lead to memory corruption in... CVE-2021-1942 9.3 CriticalApril 1, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8035 firmware +169 more +171 more Possible buffer over read due to lack of size validation while copying data from DBR buffer to RX... CVE-2021-35071 Fix available 5.5 MediumApril 1, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8009w firmware, aqt1000 firmware +129 more +131 more Possible use after free due to lack of null check of DRM file status after file structure is... CVE-2021-30334 Fix available 8.4 HighApril 1, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm aqt1000 firmware, ar8031 firmware +110 more +112 more Possible out of bound read due to improper length calculation of WMI message. in Snapdragon Auto,... CVE-2021-35106 Fix available 7.8 HighMarch 1, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009w firmware, apq8017 firmware +155 more +157 more Possible out of bounds access due to improper input validation during graphics profiling in... CVE-2021-35105 Fix available 8.4 HighMarch 1, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8035 firmware +183 more +185 more Possible out of bound read due to improper validation of IE length during SSID IE parse when... CVE-2021-35088 Fix available 8.2 HighMarch 1, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm aqt1000 firmware, ar8035 firmware +96 more +98 more Possible out of bounds write due to improper validation of number of GPIOs configured in an... CVE-2021-30322 7.8 HighFebruary 11, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8009w firmware, apq8017 firmware +135 more +137 more Improper validation of input when provisioning the HDCP key can lead to memory corruption in... CVE-2021-30318 8.4 HighFebruary 11, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8096au firmware, aqt1000 firmware +189 more +191 more Improper validation of data length received from DMA buffer can lead to memory corruption. in... CVE-2021-35069 Fix available 7.8 HighFebruary 1, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +108 more +110 more Possible null pointer dereference due to improper validation of APE clip in Snapdragon Auto,... CVE-2021-30330 7.5 HighJanuary 13, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8009w firmware, apq8017 firmware +108 more +110 more Possible denial of service due to incorrectly decoding hex data for the SIB2 OTA message and... CVE-2021-30300 7.5 HighJanuary 13, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ar8031 firmware, ar8035 firmware +100 more +102 more Improper validation of memory region in Hypervisor can lead to incorrect region mapping in... CVE-2021-30285 9.3 CriticalJanuary 13, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +194 more +196 more An out of bound memory access can occur due to improper validation of number of frames being... CVE-2021-30351 9.8 CriticalJanuary 3, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, qualcomm ar6003 firmware, ar8035 firmware +74 more +76 more Possible assertion due to lack of input validation in PUSCH configuration in Snapdragon Auto,... CVE-2021-30293 7.5 HighJanuary 3, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009w firmware, apq8017 firmware +101 more +103 more Possible buffer overflow due to lack of range check while processing a DIAG command for COEX... CVE-2021-30289 7.8 HighJanuary 3, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ar8031 firmware, ar8035 firmware +123 more +125 more Possible out of bound write in RAM partition table due to improper validation on number of... CVE-2021-30282 8.4 HighJanuary 3, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ar8031 firmware, ar8035 firmware +124 more +126 more Improper input validation in TrustZone memory transfer interface can lead to information... CVE-2021-30278 7.1 HighJanuary 3, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ar8031 firmware, ar8035 firmware +125 more +127 more Possible integer overflow in page alignment interface due to lack of address and size validation... CVE-2021-30275 9.3 CriticalJanuary 3, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ar8031 firmware, ar8035 firmware +124 more +126 more Possible integer overflow in access control initialization interface due to lack and size and... CVE-2021-30274 8.4 HighJanuary 3, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009w firmware, apq8017 firmware +194 more +196 more Possible null pointer dereference in thread cache operation handler due to lack of validation of... CVE-2021-30272 7.3 HighJanuary 3, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009w firmware, apq8017 firmware +164 more +166 more Possible null pointer dereference in trap handler due to lack of thread ID validation before... CVE-2021-30271 7.3 HighJanuary 3, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009w firmware, apq8017 firmware +153 more +155 more Possible null pointer dereference in thread profile trap handler due to lack of thread ID... CVE-2021-30270 7.3 HighJanuary 3, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ar8031 firmware, ar8035 firmware +115 more +117 more Possible null pointer dereference due to lack of TLB validation for user provided address in... CVE-2021-30269 7.3 HighJanuary 3, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009w firmware, apq8017 firmware +135 more +137 more Possible heap Memory Corruption Issue due to lack of input validation when sending HWTC IQ... CVE-2021-30268 7.8 HighJanuary 3, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm aqt1000 firmware, ar8035 firmware +86 more +88 more Possible integer overflow to buffer overflow due to improper input validation in FTM ARA commands... CVE-2021-30267 7.8 HighJanuary 3, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ar8031 firmware, ar8035 firmware +115 more +117 more Improper access control in TrustZone due to improper error handling while handling the signing... CVE-2021-1894 7.1 HighJanuary 3, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wearables, qualcomm ar8031 firmware, ar8035 firmware +108 more +110 more Improper validation of function pointer type with actual function signature can lead to assertion... CVE-2021-30353 Fix available 7.5 HighJanuary 1, 2022
• Show olderLoading…