Qualcomm FSM20056 Firmware vulnerabilities

8 CVEs affecting Qualcomm FSM20056 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-47331, published 2026-01-07.

More from Qualcomm.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-33045, published 2024-09-02. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption when BTFM client sends new messages over Slimbus to ADSP.
• CVE-2024-43057, published 2025-03-03. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption while processing command in Glink linux.
• CVE-2024-21475, published 2024-05-06. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption when the payload received from firmware is not as per the expected protocol size.
• CVE-2023-43513, published 2024-02-06. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may point to address in the middle of ring element.
• CVE-2024-23368, published 2024-07-01. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption when allocating and accessing an entry in an SMEM partition.
• CVE-2025-27061, published 2025-07-08. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the video firmware.
• CVE-2025-27042, published 2025-07-08. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption while processing video packets received from video firmware.
• CVE-2025-47331, published 2026-01-07. Medium severity, CVSS 6.1. EPSS: 0.1% chance of exploitation in the next 30 days. Information disclosure while processing a firmware event.