CVEvulnerability

CVE-2021-35095

7.0 HIGH Published 2022-06-14 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-06-14
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.4 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
7.0 HIGH — CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-502

Description

Improper serialization of message queue client registration can lead to race condition allowing multiple gunyah message clients to register with same label in Snapdragon Connectivity, Snapdragon Mobile

Affected configurations

• qualcomm ar8035 firmware • qualcomm qca8081 firmware • qualcomm qca8337 firmware • qualcomm sd 8 gen1 5g firmware • qualcomm sdx65 firmware • qualcomm wcd9380 firmware • qualcomm wcn6855 firmware • qualcomm wcn6856 firmware • qualcomm wsa8830 firmware • qualcomm wsa8835 firmware

Related

Weakness · CWE (1)

  • CWE-502 Deserialization of Untrusted Data weakness

References