CVE-2021-35071

Description

Possible buffer over read due to lack of size validation while copying data from DBR buffer to RX buffer and can lead to Denial of Service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Related CPE's

oqualcommaqt1000_firmware-*******

hqualcommaqt1000-*******

oqualcommar8035_firmware-*******

hqualcommar8035-*******

oqualcommar9380_firmware-*******

hqualcommar9380-*******

oqualcommcsr8811_firmware-*******

hqualcommcsr8811-*******

oqualcommcsrb31024_firmware-*******

hqualcommcsrb31024-*******

References

https://www.qualcomm.com/company/product-security/bulletins/april-2022-bulletin

PatchVendor Advisory

CvssV3 impact

Could not find any metrics

CvssV2 impact

AccessComplexity

LOW

ConfidentialityImpact

NONE

AvailabilityImpact

PARTIAL

IntegrityImpact

NONE

BaseScore

2.0999999046325684

VectorString

AV:L/AC:L/Au:N/C:N/I:N/A:P

Version

2.0

AccessVector

LOCAL

Authentication

NONE

Created by Yello
About Severity.io