Out-of-Bounds Read Vulnerability in Qualcomm Snapdragon Products
CVE-2021-35084
Key Information:
Summary
This vulnerability arises from the absence of a length check for data associated with a DIAG event in several Qualcomm Snapdragon products. An attacker could exploit this flaw to access unauthorized memory locations, potentially leading to the exposure of sensitive data or causing instability in affected devices. Ensuring timely updates and security patches are essential to mitigate risks posed by this vulnerability.
Affected Version(s)
Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music AQT1000, AR8031, AR8035, CSRA6620, CSRA6640, CSRB31024, QCA6174A, QCA6175A, QCA6390, QCA6391, QCA6420, QCA6426, QCA6430, QCA6436, QCA6564AU, QCA6574, QCA6574A, QCA6574AU, QCA6595AU, QCA6696, QCA8081, QCA8337, QCA9377, QCA9379, QCM4290, QCM6125, QCN7605, QCN7606, QCS405, QCS410, QCS4290, QCS605, QCS610, QCS6125, QRB5165, QRB5165M, QRB5165N, SA415M, SA515M, SA6155P, SA8155P, SA8195P, SD 8 Gen1 5G, SD460, SD480, SD662, SD680, SD690 5G, SD695, SD750G, SD765, SD765G, SD768G, SD778G, SD780G, SD855, SD865 5G, SD870, SD888 5G, SDX12, SDX55, SDX55M, SDX65, SDXR2 5G, SM7250P, SM7325P, WCD9335, WCD9341, WCD9360, WCD9370, WCD9375, WCD9380, WCD9385, WCN3950, WCN3980, WCN3988, WCN3990, WCN3991, WCN3998, WCN3999, WCN6740, WCN6750, WCN6850, WCN6851, WCN6855, WCN6856, WCN7850, WCN7851, WSA8810, WSA8815, WSA8830, WSA8835
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved