Latest qualcomm fsm10055 firmware vulnerabilities since last week (CVE List)

● CVE-2023-24847

Transient DOS in Modem while allocating DSM items.

Google Android

Qualcomm 315 5g Iot Modem Firmware

Qualcomm 315 5g Iot Modem

Google Android

and 509 more

● CVE-2022-40504

Transient DOS due to reachable assertion in Modem when UE received Downlink Data Indication message from the network.

Google Android

Qualcomm 315 5g Iot Modem Firmware

Qualcomm 315 5g Iot Modem

Google Android

Qualcomm Apq8017

Google Android

and 373 more

● CVE-2022-33213

Memory corruption in modem due to buffer overflow while processing a PPP packet

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

and 413 more

● CVE-2022-33233

Memory corruption due to configuration weakness in modem wile sending command to write protected files.

Google Android

Qualcomm Apq8009

Google Android

and 397 more

● CVE-2022-25695

Memory corruption in MODEM due to Improper Validation of Array Index while processing GSTK Proactive commands in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, ...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

and 389 more

● CVE-2022-25702

Denial of service in modem due to reachable assertion while processing reconfiguration message in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearable...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Qualcomm Apq8037 Firmware

Qualcomm Apq8037

and 153 more

● CVE-2021-35071

Possible buffer over read due to lack of size validation while copying data from DBR buffer to RX buffer and can lead to Denial of Service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivi...

Google Android

Qualcomm Ar8035

Qualcomm Ar9380 Firmware

Qualcomm Ar9380

and 336 more

● CVE-2021-30349

Improper access control sequence for AC database after memory allocation can lead to possible memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT...

Google Android

Qualcomm Ar8031

Google Android

Qualcomm Ar8035

and 277 more

● CVE-2021-30334

Possible use after free due to lack of null check of DRM file status after file structure is freed in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon ...

Google Android

Qualcomm Ar8031

and 257 more

● CVE-2021-30281

Possible unauthorized access to secure space due to improper check of data allowed while flashing the no access control device configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connecti...

Google Android

Qualcomm Ar8031

Google Android

Qualcomm Ar8035

and 289 more

● CVE-2021-35104

Possible buffer overflow due to improper parsing of headers while playing the FLAC audio clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Indus...

Google Android

Qualcomm Apq8017

Qualcomm Apq8064au Firmware

Qualcomm Apq8064au

and 347 more

● CVE-2021-35100

Possible buffer over read due to improper calculation of string length while parsing Id3 tag in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Indust...

Google Android

Qualcomm Apq8017

Qualcomm Apq8064au Firmware

Qualcomm Apq8064au

and 235 more

● CVE-2021-30342

Improper integrity check can lead to race condition between tasks PDCP and RRC? after a valid RRC Command packet has been received in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snap...

Google Android

Qualcomm Apq8017

Google Android

and 185 more

● CVE-2021-30331

Possible buffer overflow due to improper data validation of external commands sent via DIAG interface in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdrag...

Google Android

Qualcomm Ar8035

Qualcomm Fsm10055 Firmware

Google Android

Qualcomm Fsm10056 Firmware

Qualcomm Fsm10056

and 148 more

● CVE-2021-35105

Possible out of bounds access due to improper input validation during graphics profiling in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial...

Google Android

Qualcomm Apq8017

Google Android

and 309 more

● CVE-2021-35088

Possible out of bound read due to improper validation of IE length during SSID IE parse when channel is DFS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Sn...

Google Android

Qualcomm Ar8035

Qualcomm Ar9380 Firmware

and 365 more

● CVE-2021-35106

Possible out of bound read due to improper length calculation of WMI message. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapd...

Google Android

Qualcomm Ar8031

Google Android

and 219 more

● CVE-2021-1942

Improper handling of permissions of a shared memory region can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial...

Google Android

Qualcomm Ar8031

Google Android

Qualcomm Ar8035

and 217 more

● CVE-2021-30330

Possible null pointer dereference due to improper validation of APE clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

and 214 more

● CVE-2021-30353

Improper validation of function pointer type with actual function signature can lead to assertion in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon I...

Google Android

Qualcomm Ar8031

Google Android

Qualcomm Ar8035

Qualcomm Csra6620 Firmware

Google Android

and 215 more

● CVE-2021-30300

Possible denial of service due to incorrectly decoding hex data for the SIB2 OTA message and assigning a garbage value to choice when processing the SRS configuration in Snapdragon Auto, Snapdragon Co...

Google Android

Qualcomm Apq8017

Google Android

and 215 more

● CVE-2021-30285

Improper validation of memory region in Hypervisor can lead to incorrect region mapping in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial ...

Google Android

Qualcomm Ar8031

Google Android

Qualcomm Ar8035

Qualcomm Csra6620 Firmware

Google Android

and 199 more

● CVE-2021-30319

Possible integer overflow due to improper validation of command length parameters while processing WMI command in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Elec...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Qualcomm Apq8064au Firmware

Qualcomm Apq8064au

and 263 more

● CVE-2021-30298

Possible out of bound access due to improper validation of item size and DIAG memory pools data while switching between USB and PCIE interface in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon I...

Google Android

Qualcomm Ar8031

Google Android

Qualcomm Ar8035

Qualcomm Csra6620 Firmware

Google Android

and 116 more

● CVE-2021-30275

Possible integer overflow in page alignment interface due to lack of address and size validation before alignment in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer I...

Google Android

Qualcomm Ar8031

Google Android

Qualcomm Ar8035

Qualcomm Csr8811 Firmware

and 249 more

● CVE-2021-30270

Possible null pointer dereference in thread profile trap handler due to lack of thread ID validation before dereferencing it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon...

Google Android

Qualcomm Apq8017

Qualcomm Apq8064au Firmware

Qualcomm Apq8064au

and 305 more

● CVE-2021-30337

Possible use after free when process shell memory is freed using IOCTL call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consum...

Google Android

Qualcomm Apq8009

Google Android

and 415 more

● CVE-2021-30269

Possible null pointer dereference due to lack of TLB validation for user provided address in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity,...

Google Android

Qualcomm Ar8031

Google Android

Qualcomm Ar8035

Qualcomm Csra6620 Firmware

Google Android

and 229 more

● CVE-2021-1894

Improper access control in TrustZone due to improper error handling while handling the signing key in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon ...

Google Android

Qualcomm Ar8031

Google Android

Qualcomm Ar8035

Qualcomm Csra6620 Firmware

Google Android

and 229 more

● CVE-2021-30293

Possible assertion due to lack of input validation in PUSCH configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT

Google Android

Qualcomm Ar6003 Firmware

Google Android

Qualcomm Ar8035

Google Android

and 147 more

● CVE-2021-30272

Possible null pointer dereference in thread cache operation handler due to lack of validation of user provided input in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consume...

Google Android

Qualcomm Apq8017

Google Android

and 387 more

● CVE-2021-30274

Possible integer overflow in access control initialization interface due to lack and size and address validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IO...

Google Android

Qualcomm Ar8031

Google Android

Qualcomm Ar8035

Qualcomm Csr8811 Firmware

and 247 more

● CVE-2021-30262

Improper validation of a socket state when socket events are being sent to clients can lead to invalid access of memory in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Cons...

Google Android

Qualcomm Ar8031

and 205 more

● CVE-2021-30267

Possible integer overflow to buffer overflow due to improper input validation in FTM ARA commands in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon I...

Google Android

Qualcomm Ar8035

Google Android

and 171 more

● CVE-2021-30271

Possible null pointer dereference in trap handler due to lack of thread ID validation before dereferencing it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Elect...

Google Android

Qualcomm Apq8017

Google Android

and 327 more

● CVE-2021-30268

Possible heap Memory Corruption Issue due to lack of input validation when sending HWTC IQ Capture command in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Sna...

Google Android

Qualcomm Apq8017

Google Android

and 269 more

● CVE-2021-30289

Possible buffer overflow due to lack of range check while processing a DIAG command for COEX management in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snap...

Google Android

Qualcomm Apq8017

Google Android

and 201 more

● CVE-2021-30351

An out of bound memory access can occur due to improper validation of number of frames being passed during music playback in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Co...

Google Android

Qualcomm Apq8009

Google Android

and 387 more

● CVE-2021-30335

Possible assertion in QOS request due to improper validation when multiple add or update request are received simultaneously in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon...

Google Android

and 343 more

● CVE-2021-30278

Improper input validation in TrustZone memory transfer interface can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon...

Google Android

Qualcomm Ar8031

Google Android

Qualcomm Ar8035

Qualcomm Csr8811 Firmware

and 247 more

● CVE-2021-30265

Possible memory corruption due to improper validation of memory address while processing user-space IOCTL for clearing Filter and Route statistics in Snapdragon Auto, Snapdragon Compute, Snapdragon Co...

Google Android

Qualcomm Ar8031

and 184 more

● CVE-2021-30264

Possible use after free due improper validation of reference from call back to internal store table in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Sna...

Google Android

Qualcomm Apq8009

Google Android

and 382 more

● CVE-2021-1924

Information disclosure through timing and power side-channels during mod exponentiation for RSA-CRT in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Con...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8016 Firmware

and 629 more

● CVE-2021-1979

Possible buffer overflow due to improper validation of FTM command payload in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdrag...

Google Android

Qualcomm Ar8035

Google Android

and 239 more

● CVE-2021-30316

Possible out of bound memory access due to improper boundary check while creating HSYNC fence in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdrago...

Google Android

Qualcomm Ar8031

Qualcomm Csra6620 Firmware

Google Android

Qualcomm Csra6640 Firmware

Google Android

and 148 more

● CVE-2021-1968

Improper validation of kernel buffer address while copying information back to user buffer can lead to kernel memory information exposure to user space in Snapdragon Auto, Snapdragon Compute, Snapdrag...

Google Android

Qualcomm Ar8031

Google Android

Qualcomm Ar8035

and 118 more

● CVE-2021-1966

Possible buffer overflow due to lack of length check of source and destination buffer before copying in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdra...

Google Android

Qualcomm Ar8031

Google Android

Qualcomm Ar8035

and 124 more

● CVE-2021-1969

Improper validation of kernel buffer address while copying information back to user buffer can lead to kernel memory information exposure to user space in Snapdragon Auto, Snapdragon Compute, Snapdrag...

Google Android

Qualcomm Ar8031

Google Android

Qualcomm Ar8035

and 118 more

● CVE-2021-1980

Possible buffer over read due to lack of length check while parsing beacon IE response in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Sn...

Google Android

Qualcomm Apq8064au Firmware

Qualcomm Apq8064au

Google Android

and 433 more

● CVE-2021-30312

Improper authentication of sub-frames of a multicast AMSDU frame can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon...

Google Android

and 383 more

Latest qualcomm fsm10055 firmware Vulnerabilities

Company

Resources

Contact