Search/CVE-2021-35079
● CVE — Medium

CVE-2021-35079

VendorqualcommProductqcs605 firmware, apq8053 firmware, msm8953 firmware, qca6390 firmware, qcm4290 firmware, qcs4290 firmware, qcs603 firmware, aqt1000 firmware, qca6391 firmware, qca6420 firmware, qca6430 firmware, qca6426 firmware, qca6436 firmware, qualcomm215 firmware, sd480 firmware, sd778g firmware, sd460 firmware, sd690 5g firmware, sd662 firmware, sd750g firmware, sd765 firmware, sd765g firmware, sd768g firmware, sd680 firmware, sd695 firmwareDiscoveredJun 14, 2022UpdatedNov 21, 2024

Improper validation of permissions for third party application accessing Telephony service API can lead to information disclosure in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

View graph Watch Export
CVSS v3.1
6.2 MEDIUM
EPSS
0.13%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Aug 16, 2026 → Oct 22, 2026
● 0.00pp
0.13% → 0.13% over 2 tracked changes
CVSS v3.1 Detail
Attack VectorLOCAL
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
ScopeUNCHANGED
ConfidentialityNONE
IntegrityNONE
AvailabilityHIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Connections
26 relationships
Timeline
disclosure → media coverage
Jun 14, 2022
Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024