CVE Feed

    Dashboard / CVE / CVE-2021-35072

    CVE-2021-35072

    Possible buffer overflow due to improper validation of array index while processing external DIAG command in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

    Published:Jun 14, 2022
    Last Modified:Nov 21, 2024
    EPS:Jun 14, 2022
    EPSS Score:0.00035
    CVSS Score:7.8

    Affected Products

    Vendor
    Qualcomm
    Product
    Apq8009
    Vendor
    Qualcomm
    Product
    Apq8009 Firmware
    Vendor
    Qualcomm
    Product
    Apq8009w
    Vendor
    Qualcomm
    Product
    Apq8009w Firmware
    Vendor
    Qualcomm
    Product
    Apq8017
    Vendor
    Qualcomm
    Product
    Apq8017 Firmware
    Vendor
    Qualcomm
    Product
    Apq8037
    Vendor
    Qualcomm
    Product
    Apq8037 Firmware
    Vendor
    Qualcomm
    Product
    Apq8053
    Vendor
    Qualcomm
    Product
    Apq8053 Firmware
    Vendor
    Qualcomm
    Product
    Apq8096au
    Vendor
    Qualcomm
    Product
    Apq8096au Firmware
    Vendor
    Qualcomm
    Product
    Mdm9150
    Vendor
    Qualcomm
    Product
    Mdm9150 Firmware
    Vendor
    Qualcomm
    Product
    Mdm9206
    Vendor
    Qualcomm
    Product
    Mdm9206 Firmware
    Vendor
    Qualcomm
    Product
    Mdm9250
    Vendor
    Qualcomm
    Product
    Mdm9250 Firmware
    Vendor
    Qualcomm
    Product
    Mdm9607
    Vendor
    Qualcomm
    Product
    Mdm9607 Firmware
    Vendor
    Qualcomm
    Product
    Mdm9628
    Vendor
    Qualcomm
    Product
    Mdm9628 Firmware
    Vendor
    Qualcomm
    Product
    Mdm9640
    Vendor
    Qualcomm
    Product
    Mdm9640 Firmware
    Vendor
    Qualcomm
    Product
    Mdm9650
    Vendor
    Qualcomm
    Product
    Mdm9650 Firmware
    Vendor
    Qualcomm
    Product
    Msm8108
    Vendor
    Qualcomm
    Product
    Msm8108 Firmware
    Vendor
    Qualcomm
    Product
    Msm8208
    Vendor
    Qualcomm
    Product
    Msm8208 Firmware
    Vendor
    Qualcomm
    Product
    Msm8209
    Vendor
    Qualcomm
    Product
    Msm8209 Firmware
    Vendor
    Qualcomm
    Product
    Msm8608
    Vendor
    Qualcomm
    Product
    Msm8608 Firmware
    Vendor
    Qualcomm
    Product
    Msm8909w
    Vendor
    Qualcomm
    Product
    Msm8909w Firmware
    Vendor
    Qualcomm
    Product
    Msm8917
    Vendor
    Qualcomm
    Product
    Msm8917 Firmware
    Vendor
    Qualcomm
    Product
    Msm8920
    Vendor
    Qualcomm
    Product
    Msm8920 Firmware
    Vendor
    Qualcomm
    Product
    Msm8937
    Vendor
    Qualcomm
    Product
    Msm8937 Firmware
    Vendor
    Qualcomm
    Product
    Msm8940
    Vendor
    Qualcomm
    Product
    Msm8940 Firmware
    Vendor
    Qualcomm
    Product
    Msm8953
    Vendor
    Qualcomm
    Product
    Msm8953 Firmware
    Vendor
    Qualcomm
    Product
    Msm8996au
    Vendor
    Qualcomm
    Product
    Msm8996au Firmware
    Vendor
    Qualcomm
    Product
    Qca6174a
    Vendor
    Qualcomm
    Product
    Qca6174a Firmware
    Vendor
    Qualcomm
    Product
    Qca6310
    Vendor
    Qualcomm
    Product
    Qca6310 Firmware
    Vendor
    Qualcomm
    Product
    Qca6320
    Vendor
    Qualcomm
    Product
    Qca6320 Firmware
    Vendor
    Qualcomm
    Product
    Qca6564a
    Vendor
    Qualcomm
    Product
    Qca6564a Firmware
    Vendor
    Qualcomm
    Product
    Qca6564au
    Vendor
    Qualcomm
    Product
    Qca6564au Firmware
    Vendor
    Qualcomm
    Product
    Qca6574
    Vendor
    Qualcomm
    Product
    Qca6574 Firmware
    Vendor
    Qualcomm
    Product
    Qca6574a
    Vendor
    Qualcomm
    Product
    Qca6574a Firmware
    Vendor
    Qualcomm
    Product
    Qca6574au
    Vendor
    Qualcomm
    Product
    Qca6574au Firmware
    Vendor
    Qualcomm
    Product
    Qca6584
    Vendor
    Qualcomm
    Product
    Qca6584 Firmware
    Vendor
    Qualcomm
    Product
    Qca9367
    Vendor
    Qualcomm
    Product
    Qca9367 Firmware
    Vendor
    Qualcomm
    Product
    Qca9377
    Vendor
    Qualcomm
    Product
    Qca9377 Firmware
    Vendor
    Qualcomm
    Product
    Qca9379
    Vendor
    Qualcomm
    Product
    Qca9379 Firmware
    Vendor
    Qualcomm
    Product
    Qcm2290
    Vendor
    Qualcomm
    Product
    Qcm2290 Firmware
    Vendor
    Qualcomm
    Product
    Qcm4290
    Vendor
    Qualcomm
    Product
    Qcm4290 Firmware
    Vendor
    Qualcomm
    Product
    Qcs2290
    Vendor
    Qualcomm
    Product
    Qcs2290 Firmware
    Vendor
    Qualcomm
    Product
    Qcs4290
    Vendor
    Qualcomm
    Product
    Qcs4290 Firmware
    Vendor
    Qualcomm
    Product
    Qualcomm215
    Vendor
    Qualcomm
    Product
    Qualcomm215 Firmware
    Vendor
    Qualcomm
    Product
    Sd210
    Vendor
    Qualcomm
    Product
    Sd210 Firmware
    Vendor
    Qualcomm
    Product
    Sd429
    Vendor
    Qualcomm
    Product
    Sd429 Firmware
    Vendor
    Qualcomm
    Product
    Sd439
    Vendor
    Qualcomm
    Product
    Sd439 Firmware
    Vendor
    Qualcomm
    Product
    Sd450
    Vendor
    Qualcomm
    Product
    Sd450 Firmware
    Vendor
    Qualcomm
    Product
    Sd460
    Vendor
    Qualcomm
    Product
    Sd460 Firmware
    Vendor
    Qualcomm
    Product
    Sd632
    Vendor
    Qualcomm
    Product
    Sd632 Firmware
    Vendor
    Qualcomm
    Product
    Sd662
    Vendor
    Qualcomm
    Product
    Sd662 Firmware
    Vendor
    Qualcomm
    Product
    Sd680
    Vendor
    Qualcomm
    Product
    Sd680 Firmware
    Vendor
    Qualcomm
    Product
    Sd820
    Vendor
    Qualcomm
    Product
    Sd820 Firmware
    Vendor
    Qualcomm
    Product
    Sd821
    Vendor
    Qualcomm
    Product
    Sd821 Firmware
    Vendor
    Qualcomm
    Product
    Sd835
    Vendor
    Qualcomm
    Product
    Sd835 Firmware
    Vendor
    Qualcomm
    Product
    Sdm429w
    Vendor
    Qualcomm
    Product
    Sdm429w Firmware
    Vendor
    Qualcomm
    Product
    Sdw2500
    Vendor
    Qualcomm
    Product
    Sdw2500 Firmware
    Vendor
    Qualcomm
    Product
    Sdx12
    Vendor
    Qualcomm
    Product
    Sdx12 Firmware
    Vendor
    Qualcomm
    Product
    Sm4125
    Vendor
    Qualcomm
    Product
    Sm4125 Firmware
    Vendor
    Qualcomm
    Product
    Sw5100
    Vendor
    Qualcomm
    Product
    Sw5100 Firmware
    Vendor
    Qualcomm
    Product
    Sw5100p
    Vendor
    Qualcomm
    Product
    Sw5100p Firmware
    Vendor
    Qualcomm
    Product
    Wcd9326
    Vendor
    Qualcomm
    Product
    Wcd9326 Firmware
    Vendor
    Qualcomm
    Product
    Wcd9330
    Vendor
    Qualcomm
    Product
    Wcd9330 Firmware
    Vendor
    Qualcomm
    Product
    Wcd9335
    Vendor
    Qualcomm
    Product
    Wcd9335 Firmware
    Vendor
    Qualcomm
    Product
    Wcd9340
    Vendor
    Qualcomm
    Product
    Wcd9340 Firmware
    Vendor
    Qualcomm
    Product
    Wcd9341
    Vendor
    Qualcomm
    Product
    Wcd9341 Firmware
    Vendor
    Qualcomm
    Product
    Wcd9370
    Vendor
    Qualcomm
    Product
    Wcd9370 Firmware
    Vendor
    Qualcomm
    Product
    Wcd9375
    Vendor
    Qualcomm
    Product
    Wcd9375 Firmware
    Vendor
    Qualcomm
    Product
    Wcn3610
    Vendor
    Qualcomm
    Product
    Wcn3610 Firmware
    Vendor
    Qualcomm
    Product
    Wcn3615
    Vendor
    Qualcomm
    Product
    Wcn3615 Firmware
    Vendor
    Qualcomm
    Product
    Wcn3620
    Vendor
    Qualcomm
    Product
    Wcn3620 Firmware
    Vendor
    Qualcomm
    Product
    Wcn3660
    Vendor
    Qualcomm
    Product
    Wcn3660 Firmware
    Vendor
    Qualcomm
    Product
    Wcn3660b
    Vendor
    Qualcomm
    Product
    Wcn3660b Firmware
    Vendor
    Qualcomm
    Product
    Wcn3680
    Vendor
    Qualcomm
    Product
    Wcn3680 Firmware
    Vendor
    Qualcomm
    Product
    Wcn3680b
    Vendor
    Qualcomm
    Product
    Wcn3680b Firmware
    Vendor
    Qualcomm
    Product
    Wcn3910
    Vendor
    Qualcomm
    Product
    Wcn3910 Firmware
    Vendor
    Qualcomm
    Product
    Wcn3950
    Vendor
    Qualcomm
    Product
    Wcn3950 Firmware
    Vendor
    Qualcomm
    Product
    Wcn3980
    Vendor
    Qualcomm
    Product
    Wcn3980 Firmware
    Vendor
    Qualcomm
    Product
    Wcn3988
    Vendor
    Qualcomm
    Product
    Wcn3988 Firmware
    Vendor
    Qualcomm
    Product
    Wcn3990
    Vendor
    Qualcomm
    Product
    Wcn3990 Firmware
    Vendor
    Qualcomm
    Product
    Wcn3998
    Vendor
    Qualcomm
    Product
    Wcn3998 Firmware
    Vendor
    Qualcomm
    Product
    Wsa8810
    Vendor
    Qualcomm
    Product
    Wsa8810 Firmware
    Vendor
    Qualcomm
    Product
    Wsa8815
    Vendor
    Qualcomm
    Product
    Wsa8815 Firmware
    Vendor
    Qualcomm
    Product
    Wsa8830
    Vendor
    Qualcomm
    Product
    Wsa8830 Firmware
    Vendor
    Qualcomm
    Product
    Wsa8835
    Vendor
    Qualcomm
    Product
    Wsa8835 Firmware

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-100 Overflow Buffers

    Related CVEs

    CVE-2023-33080 (CVSS 7.5) — Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management fr…
    CVE-2023-33063 (CVSS 7.8) — Memory corruption in DSP Services during a remote call from HLOS to DSP.…
    CVE-2023-33018 (CVSS 7.8) — Memory corruption while using the UIM diag command to get the operators name.…
    CVE-2023-33017 (CVSS 7.8) — Memory corruption in Boot while running a ListVars test in UEFI Menu during boot.…
    CVE-2023-33059 (CVSS 7.8) — Memory corruption in Audio while processing the VOC packet data from ADSP.…
    CVE-2023-33031 (CVSS 7.8) — Memory corruption in Automotive Audio while copying data from ADSP shared buffer to the VOC packet data buffer…
    CVE-2023-33029 (CVSS 8.4) — Memory corruption in DSP Service during a remote call from HLOS to DSP.…
    CVE-2023-28560 (CVSS 7.8) — Memory corruption in WLAN HAL while processing devIndex from untrusted WMI payload.…
    CVE-2023-28537 (CVSS 8.4) — Memory corruption while allocating memory in COmxApeDec module in Audio.…
    CVE-2023-22666 (CVSS 8.4) — Memory Corruption in Audio while playing amrwbplus clips with modified content.…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High