CVEvulnerability
CVE-2021-35074
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2022-02-11
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.4 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-190
Description
Possible integer overflow due to improper fragment datatype while calculating number of fragments in a request message in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
Affected configurations
• qualcomm ar8035 firmware
• qualcomm qca6174a firmware
• qualcomm qca6391 firmware
• qualcomm qca6574au firmware
• qualcomm qca6595au firmware
• qualcomm qca6696 firmware
• qualcomm qca8081 firmware
• qualcomm qca8337 firmware
• qualcomm qca9377 firmware
• qualcomm qcm6490 firmware
• qualcomm qcs6490 firmware
• qualcomm sa6145p firmware
• qualcomm sa6150p firmware
• qualcomm sa6155p firmware
• qualcomm sa8145p firmware
• qualcomm sa8150p firmware
• qualcomm sa8155p firmware
• qualcomm sa8195p firmware
• qualcomm sd 8 gen1 5g firmware
• qualcomm sd480 firmware
• qualcomm sd888 5g firmware
• qualcomm sdx12 firmware
• qualcomm sdx65 firmware
• qualcomm sm6375 firmware
• qualcomm wcd9335 firmware
• qualcomm wcd9370 firmware
• qualcomm wcd9375 firmware
• qualcomm wcd9380 firmware
• qualcomm wcd9385 firmware
• qualcomm wcn3988 firmware
• qualcomm wcn3991 firmware
• qualcomm wcn3998 firmware
• qualcomm wcn6750 firmware
• qualcomm wcn6850 firmware
• qualcomm wcn6851 firmware
• qualcomm wcn6855 firmware
• qualcomm wcn6856 firmware
• qualcomm wsa8810 firmware
• qualcomm wsa8815 firmware
• qualcomm wsa8830 firmware
• qualcomm wsa8835 firmware
Related
Weakness · CWE (1)
- CWE-190 Integer Overflow or Wraparound weakness
References
- https://www.qualcomm.com/company/product-security/bulletins/february-2022-bulletin Patch, Vendor Advisory
- https://www.qualcomm.com/company/product-security/bulletins/february-2022-bulletin Patch, Vendor Advisory