CVE Feed

    Dashboard / CVE / CVE-2021-35113

    CVE-2021-35113

    Possible authentication bypass due to improper order of signature verification and hashing in the signature verification call in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

    Published:Sep 2, 2022
    Last Modified:Nov 21, 2024
    EPS:Sep 2, 2022
    EPSS Score:0.0001
    CVSS Score:7.3

    Affected Products

    Vendor
    Qualcomm
    Product
    Aqt1000
    Vendor
    Qualcomm
    Product
    Aqt1000 Firmware
    Vendor
    Qualcomm
    Product
    Csrb31024
    Vendor
    Qualcomm
    Product
    Csrb31024 Firmware
    Vendor
    Qualcomm
    Product
    Qca6174a
    Vendor
    Qualcomm
    Product
    Qca6174a Firmware
    Vendor
    Qualcomm
    Product
    Qca6310
    Vendor
    Qualcomm
    Product
    Qca6310 Firmware
    Vendor
    Qualcomm
    Product
    Qca6335
    Vendor
    Qualcomm
    Product
    Qca6335 Firmware
    Vendor
    Qualcomm
    Product
    Qca6420
    Vendor
    Qualcomm
    Product
    Qca6420 Firmware
    Vendor
    Qualcomm
    Product
    Qca6430
    Vendor
    Qualcomm
    Product
    Qca6430 Firmware
    Vendor
    Qualcomm
    Product
    Qca6564au
    Vendor
    Qualcomm
    Product
    Qca6564au Firmware
    Vendor
    Qualcomm
    Product
    Qca6574au
    Vendor
    Qualcomm
    Product
    Qca6574au Firmware
    Vendor
    Qualcomm
    Product
    Qca6595au
    Vendor
    Qualcomm
    Product
    Qca6595au Firmware
    Vendor
    Qualcomm
    Product
    Qca6696
    Vendor
    Qualcomm
    Product
    Qca6696 Firmware
    Vendor
    Qualcomm
    Product
    Qca9377
    Vendor
    Qualcomm
    Product
    Qca9377 Firmware
    Vendor
    Qualcomm
    Product
    Qcs410
    Vendor
    Qualcomm
    Product
    Qcs410 Firmware
    Vendor
    Qualcomm
    Product
    Qcs610
    Vendor
    Qualcomm
    Product
    Qcs610 Firmware
    Vendor
    Qualcomm
    Product
    Sa415m
    Vendor
    Qualcomm
    Product
    Sa415m Firmware
    Vendor
    Qualcomm
    Product
    Sd429
    Vendor
    Qualcomm
    Product
    Sd429 Firmware
    Vendor
    Qualcomm
    Product
    Sd675
    Vendor
    Qualcomm
    Product
    Sd675 Firmware
    Vendor
    Qualcomm
    Product
    Sd678
    Vendor
    Qualcomm
    Product
    Sd678 Firmware
    Vendor
    Qualcomm
    Product
    Sd720g
    Vendor
    Qualcomm
    Product
    Sd720g Firmware
    Vendor
    Qualcomm
    Product
    Sd730
    Vendor
    Qualcomm
    Product
    Sd730 Firmware
    Vendor
    Qualcomm
    Product
    Sd7c
    Vendor
    Qualcomm
    Product
    Sd7c Firmware
    Vendor
    Qualcomm
    Product
    Sd845
    Vendor
    Qualcomm
    Product
    Sd845 Firmware
    Vendor
    Qualcomm
    Product
    Sd850
    Vendor
    Qualcomm
    Product
    Sd850 Firmware
    Vendor
    Qualcomm
    Product
    Sd855
    Vendor
    Qualcomm
    Product
    Sd855 Firmware
    Vendor
    Qualcomm
    Product
    Sd 675
    Vendor
    Qualcomm
    Product
    Sd 675 Firmware
    Vendor
    Qualcomm
    Product
    Sdm429w
    Vendor
    Qualcomm
    Product
    Sdm429w Firmware
    Vendor
    Qualcomm
    Product
    Sdx24
    Vendor
    Qualcomm
    Product
    Sdx24 Firmware
    Vendor
    Qualcomm
    Product
    Sdx50m
    Vendor
    Qualcomm
    Product
    Sdx50m Firmware
    Vendor
    Qualcomm
    Product
    Sdx55
    Vendor
    Qualcomm
    Product
    Sdx55 Firmware
    Vendor
    Qualcomm
    Product
    Sdx55m
    Vendor
    Qualcomm
    Product
    Sdx55m Firmware
    Vendor
    Qualcomm
    Product
    Sm6250
    Vendor
    Qualcomm
    Product
    Sm6250 Firmware
    Vendor
    Qualcomm
    Product
    Sm6250p
    Vendor
    Qualcomm
    Product
    Sm6250p Firmware
    Vendor
    Qualcomm
    Product
    Wcd9340
    Vendor
    Qualcomm
    Product
    Wcd9340 Firmware
    Vendor
    Qualcomm
    Product
    Wcd9341
    Vendor
    Qualcomm
    Product
    Wcd9341 Firmware
    Vendor
    Qualcomm
    Product
    Wcd9370
    Vendor
    Qualcomm
    Product
    Wcd9370 Firmware
    Vendor
    Qualcomm
    Product
    Wcd9371
    Vendor
    Qualcomm
    Product
    Wcd9371 Firmware
    Vendor
    Qualcomm
    Product
    Wcd9375
    Vendor
    Qualcomm
    Product
    Wcd9375 Firmware
    Vendor
    Qualcomm
    Product
    Wcd9380
    Vendor
    Qualcomm
    Product
    Wcd9380 Firmware
    Vendor
    Qualcomm
    Product
    Wcn3620
    Vendor
    Qualcomm
    Product
    Wcn3620 Firmware
    Vendor
    Qualcomm
    Product
    Wcn3660b
    Vendor
    Qualcomm
    Product
    Wcn3660b Firmware
    Vendor
    Qualcomm
    Product
    Wcn3950
    Vendor
    Qualcomm
    Product
    Wcn3950 Firmware
    Vendor
    Qualcomm
    Product
    Wcn3980
    Vendor
    Qualcomm
    Product
    Wcn3980 Firmware
    Vendor
    Qualcomm
    Product
    Wcn3988
    Vendor
    Qualcomm
    Product
    Wcn3988 Firmware
    Vendor
    Qualcomm
    Product
    Wcn3990
    Vendor
    Qualcomm
    Product
    Wcn3990 Firmware
    Vendor
    Qualcomm
    Product
    Wcn3991
    Vendor
    Qualcomm
    Product
    Wcn3991 Firmware
    Vendor
    Qualcomm
    Product
    Wcn3998
    Vendor
    Qualcomm
    Product
    Wcn3998 Firmware
    Vendor
    Qualcomm
    Product
    Wsa8810
    Vendor
    Qualcomm
    Product
    Wsa8810 Firmware
    Vendor
    Qualcomm
    Product
    Wsa8815
    Vendor
    Qualcomm
    Product
    Wsa8815 Firmware

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-463 Padding Oracle Crypto Attack
    CAPEC-475 Signature Spoofing by Improper Validation

    Related CVEs

    CVE-2025-59611 (CVSS 6.7) — Memory corruption in diagnostic services due to absence of input validation…
    CVE-2026-21378 (CVSS 7.8) — Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a cam…
    CVE-2026-21376 (CVSS 7.8) — Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a cam…
    CVE-2026-21374 (CVSS 7.8) — Memory Corruption when processing auxiliary sensor input/output control commands with insufficient buffer size…
    CVE-2026-21373 (CVSS 7.8) — Memory Corruption when accessing an output buffer without validating its size during IOCTL processing.…
    CVE-2026-21371 (CVSS 7.8) — Memory Corruption when retrieving output buffer with insufficient size validation.…
    CVE-2025-47383 (CVSS 7.2) — Weak configuration may lead to cryptographic issue when a VoWiFi call is triggered from UE.…
    CVE-2025-47359 (CVSS 7.8) — Memory Corruption when multiple threads simultaneously access a memory free API.…
    CVE-2025-47348 (CVSS 7.8) — Memory corruption while processing identity credential operations in the trusted application.…
    CVE-2025-47333 (CVSS 6.6) — Memory corruption while handling buffer mapping operations in the cryptographic driver.…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High