Search/CVE-2021-35080
● CVE — Medium

CVE-2021-35080

VendorqualcommProductqcm4290 firmware, qcs4290 firmware, qcm2290 firmware, qcs2290 firmware, wcn3991 firmware, wcn3998 firmware, wsa8810 firmware, wsa8815 firmware, sd480 firmware, wcd9370 firmware, wcd9375 firmware, wcd9385 firmware, wsa8830 firmware, wsa8835 firmware, sd460 firmware, wcn3950 firmware, wcn3980 firmware, sd662 firmware, wcn3988 firmware, sd680 firmware, sw5100 firmware, sw5100p firmware, wcn3910 firmware, sd695 firmware, sm4125 firmwareDiscoveredJun 14, 2022UpdatedNov 21, 2024

Disabled SMMU from secure side while RPM is assigned a secure stream can lead to information disclosure in Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

View graph Watch Export
CVSS v3.1
6.5 MEDIUM
EPSS
0.16%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Aug 16, 2026 → Oct 22, 2026
● 0.00pp
0.16% → 0.16% over 2 tracked changes
CVSS v3.1 Detail
Attack VectorLOCAL
Attack ComplexityLOW
Privileges RequiredLOW
User InteractionNONE
ScopeCHANGED
ConfidentialityHIGH
IntegrityNONE
AvailabilityNONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Connections
26 relationships
Timeline
disclosure → media coverage
Jun 14, 2022
Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024