Search/CVE-2021-35074
● CVE — High

CVE-2021-35074

VendorqualcommProductqca6174a firmware, qca6574au firmware, qca9377 firmware, qca8081 firmware, sa6155p firmware, sa8155p firmware, sa6145p firmware, sa6150p firmware, sa8150p firmware, sa8195p firmware, ar8035 firmware, qca6391 firmware, qca6595au firmware, qca6696 firmware, qca8337 firmware, sa8145p firmware, sd480 firmware, sd888 5g firmware, qcm6490 firmware, qcs6490 firmware, sdx12 firmware, wcd9335 firmware, sd 8 gen1 5g firmware, sdx65 firmware, sm6375 firmwareDiscoveredFeb 11, 2022UpdatedNov 21, 2024

Possible integer overflow due to improper fragment datatype while calculating number of fragments in a request message in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

CVSS v3.1
8.4 HIGH
EPSS
0.19%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
CVSS v3.1 Detail
Attack VectorLOCAL
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
ScopeUNCHANGED
ConfidentialityHIGH
IntegrityHIGH
AvailabilityHIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Connections
26 relationships
Timeline
disclosure → media coverage
Feb 11, 2022
Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024