CVEvulnerability

CVE-2021-35111

5.9 MEDIUM Published 2022-06-14 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-06-14
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1 ([email protected])
5.9 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
7.1 HIGH — AV:N/AC:M/Au:N/C:N/I:N/A:C
Weaknesses
CWE-20, CWE-367

Description

Improper validation of tag id while RRC sending tag id to MAC can lead to TOCTOU race condition in Snapdragon Connectivity, Snapdragon Mobile

Affected configurations

• qualcomm ar8035 firmware • qualcomm qca6390 firmware • qualcomm qca6391 firmware • qualcomm qca8081 firmware • qualcomm qca8337 firmware • qualcomm sd 8 gen1 5g firmware • qualcomm sd765 firmware • qualcomm sd765g firmware • qualcomm sd768g firmware • qualcomm sd778g firmware • qualcomm sd865 5g firmware • qualcomm sd870 firmware • qualcomm sd888 5g firmware • qualcomm sdx55 firmware • qualcomm sdx55m firmware • qualcomm sdx65 firmware • qualcomm sm7250p firmware • qualcomm sm7450 firmware • qualcomm sm8475 firmware • qualcomm sm8475p firmware • qualcomm wcd9341 firmware • qualcomm wcd9370 firmware • qualcomm wcd9375 firmware • qualcomm wcd9380 firmware • qualcomm wcd9385 firmware • qualcomm wcn3991 firmware • qualcomm wcn3998 firmware • qualcomm wcn6750 firmware • qualcomm wcn6850 firmware • qualcomm wcn6851 firmware • qualcomm wcn6855 firmware • qualcomm wcn6856 firmware • qualcomm wcn7851 firmware • qualcomm wsa8810 firmware • qualcomm wsa8815 firmware • qualcomm wsa8830 firmware • qualcomm wsa8832 firmware • qualcomm wsa8835 firmware

Related

Weakness · CWE (2)

  • CWE-20 Improper Input Validation weakness
  • CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition weakness

References