CVEvulnerability
CVE-2021-35068
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2022-02-11
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.4 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-476
Description
Lack of null check while freeing the device information buffer in the Bluetooth HFP protocol can lead to a NULL pointer dereference in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables
Affected configurations
• qualcomm apq8009w firmware
• qualcomm aqt1000 firmware
• qualcomm ar8031 firmware
• qualcomm csra6620 firmware
• qualcomm csra6640 firmware
• qualcomm msm8909w firmware
• qualcomm qca6174a firmware
• qualcomm qca6390 firmware
• qualcomm qca6391 firmware
• qualcomm qca6426 firmware
• qualcomm qca6436 firmware
• qualcomm qca6574 firmware
• qualcomm qca6574a firmware
• qualcomm qca6574au firmware
• qualcomm qca6595au firmware
• qualcomm qca6696 firmware
• qualcomm qca9377 firmware
• qualcomm qcm2290 firmware
• qualcomm qcm4290 firmware
• qualcomm qcm6125 firmware
• qualcomm qcn9011 firmware
• qualcomm qcn9012 firmware
• qualcomm qcs2290 firmware
• qualcomm qcs405 firmware
• qualcomm qcs410 firmware
• qualcomm qcs4290 firmware
• qualcomm qcs603 firmware
• qualcomm qcs605 firmware
• qualcomm qcs610 firmware
• qualcomm qcs6125 firmware
• qualcomm qrb5165 firmware
• qualcomm qrb5165m firmware
• qualcomm qrb5165n firmware
• qualcomm qualcomm215 firmware
• qualcomm sa6145p firmware
• qualcomm sa6150p firmware
• qualcomm sa6155 firmware
• qualcomm sa6155p firmware
• qualcomm sa8145p firmware
• qualcomm sa8150p firmware
• qualcomm sa8155 firmware
• qualcomm sa8155p firmware
• qualcomm sa8195p firmware
• qualcomm sd 675 firmware
• qualcomm sd 8 gen1 5g firmware
• qualcomm sd460 firmware
• qualcomm sd480 firmware
• qualcomm sd660 firmware
• qualcomm sd662 firmware
• qualcomm sd665 firmware
• qualcomm sd675 firmware
• qualcomm sd678 firmware
• qualcomm sd690 5g firmware
• qualcomm sd720g firmware
• qualcomm sd730 firmware
• qualcomm sd750g firmware
• qualcomm sd765 firmware
• qualcomm sd765g firmware
• qualcomm sd768g firmware
• qualcomm sd778g firmware
… and 40 more
Related
Weakness · CWE (1)
- CWE-476 NULL Pointer Dereference weakness
References
- https://www.qualcomm.com/company/product-security/bulletins/february-2022-bulletin Patch, Vendor Advisory
- https://www.qualcomm.com/company/product-security/bulletins/february-2022-bulletin Patch, Vendor Advisory