CVEvulnerability
CVE-2021-35097
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2022-09-02
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.3 HIGH — CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N
- CVSS 3.1 ([email protected])
- 6.8 MEDIUM — CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-347
Description
Possible authentication bypass due to improper order of signature verification and hashing in the signature verification call in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Affected configurations
• qualcomm aqt1000 firmware
• qualcomm ar8031 firmware
• qualcomm ar8035 firmware
• qualcomm csra6620 firmware
• qualcomm csra6640 firmware
• qualcomm csrb31024 firmware
• qualcomm mdm9150 firmware
• qualcomm qca6174a firmware
• qualcomm qca6175a firmware
• qualcomm qca6310 firmware
• qualcomm qca6335 firmware
• qualcomm qca6390 firmware
• qualcomm qca6391 firmware
• qualcomm qca6420 firmware
• qualcomm qca6421 firmware
• qualcomm qca6426 firmware
• qualcomm qca6430 firmware
• qualcomm qca6431 firmware
• qualcomm qca6436 firmware
• qualcomm qca6564 firmware
• qualcomm qca6564a firmware
• qualcomm qca6564au firmware
• qualcomm qca6574 firmware
• qualcomm qca6574a firmware
• qualcomm qca6574au firmware
• qualcomm qca6595 firmware
• qualcomm qca6595au firmware
• qualcomm qca6696 firmware
• qualcomm qca8081 firmware
• qualcomm qca8337 firmware
• qualcomm qca9377 firmware
• qualcomm qcm2290 firmware
• qualcomm qcm4290 firmware
• qualcomm qcm6125 firmware
• qualcomm qcm6490 firmware
• qualcomm qcs2290 firmware
• qualcomm qcs405 firmware
• qualcomm qcs410 firmware
• qualcomm qcs4290 firmware
• qualcomm qcs610 firmware
• qualcomm qcs6125 firmware
• qualcomm qcs6490 firmware
• qualcomm qrb5165 firmware
• qualcomm qrb5165m firmware
• qualcomm qrb5165n firmware
• qualcomm qsm8350 firmware
• qualcomm sa415m firmware
• qualcomm sa515m firmware
• qualcomm sa6145p firmware
• qualcomm sa6155 firmware
• qualcomm sa6155p firmware
• qualcomm sa8155 firmware
• qualcomm sa8155p firmware
• qualcomm sa8195p firmware
• qualcomm sa8540p firmware
• qualcomm sa9000p firmware
• qualcomm sc8180x\+sdx55 firmware
• qualcomm sd 675 firmware
• qualcomm sd 8cx firmware
• qualcomm sd 8cx gen2 firmware
… and 69 more
Related
Weakness · CWE (1)
- CWE-347 Improper Verification of Cryptographic Signature weakness