Lucene search

QualcommCVE-2021-35121

HistoryJun 14, 2022 - 10:15 a.m.

CVE-2021-35121

2022-06-1410:15:17

CWE-129

qualcomm

web.nvd.nist.gov

cve-2021-35121

array index

mutex

use after free

synx driver

snapdragon compute

snapdragon connectivity

snapdragon industrial iot

snapdragon mobile

nvd

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

6.7

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

Percentile

12.6%

JSON

An array index is improperly used to lock and unlock a mutex which can lead to a Use After Free condition In the Synx driver in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

Affected configurations

Nvd

Node

qualcommapq8053_firmwareMatch-

AND

qualcommapq8053Match-

Node

qualcommmsm8953_firmwareMatch-

AND

qualcommmsm8953Match-

Node

qualcommqca6390_firmwareMatch-

AND

qualcommqca6390Match-

Node

qualcommqca6391_firmwareMatch-

AND

qualcommqca6391Match-

Node

qualcommqca6426_firmwareMatch-

AND

qualcommqca6426Match-

Node

qualcommqca6436_firmwareMatch-

AND

qualcommqca6436Match-

Node

qualcommqcm2290_firmwareMatch-

AND

qualcommqcm2290Match-

Node

qualcommqcm4290_firmwareMatch-

AND

qualcommqcm4290Match-

Node

qualcommqcs2290_firmwareMatch-

AND

qualcommqcs2290Match-

Node

qualcommqcs4290_firmwareMatch-

AND

qualcommqcs4290Match-

Node

qualcommqrb5165_firmwareMatch-

AND

qualcommqrb5165Match-

Node

qualcommqrb5165m_firmwareMatch-

AND

qualcommqrb5165mMatch-

Node

qualcommqrb5165n_firmwareMatch-

AND

qualcommqrb5165nMatch-

Node

qualcommsd460_firmwareMatch-

AND

qualcommsd460Match-

Node

qualcommsd662_firmwareMatch-

AND

qualcommsd662Match-

Node

qualcommsd680_firmwareMatch-

AND

qualcommsd680Match-

Node

qualcommsd690_5g_firmwareMatch-

AND

qualcommsd690_5gMatch-

Node

qualcommsd750g_firmwareMatch-

AND

qualcommsd750gMatch-

Node

qualcommsd765_firmwareMatch-

AND

qualcommsd765Match-

Node

qualcommsd765g_firmwareMatch-

AND

qualcommsd765gMatch-

Node

qualcommsd768g_firmwareMatch-

AND

qualcommsd768gMatch-

Node

qualcommsd865_5g_firmwareMatch-

AND

qualcommsd865_5gMatch-

Node

qualcommsd870_firmwareMatch-

AND

qualcommsd870Match-

Node

qualcommsdx55m_firmwareMatch-

AND

qualcommsdx55mMatch-

Node

qualcommsdxr2_5g_firmwareMatch-

AND

qualcommsdxr2_5gMatch-

Node

qualcommsm7250p_firmwareMatch-

AND

qualcommsm7250pMatch-

Node

qualcommwcd9326_firmwareMatch-

AND

qualcommwcd9326Match-

Node

qualcommwcd9370_firmwareMatch-

AND

qualcommwcd9370Match-

Node

qualcommwcd9375_firmwareMatch-

AND

qualcommwcd9375Match-

Node

qualcommwcd9380_firmwareMatch-

AND

qualcommwcd9380Match-

Node

qualcommwcd9385_firmwareMatch-

AND

qualcommwcd9385Match-

Node

qualcommwcn3615_firmwareMatch-

AND

qualcommwcn3615Match-

Node

qualcommwcn3680b_firmwareMatch-

AND

qualcommwcn3680bMatch-

Node

qualcommwcn3910_firmwareMatch-

AND

qualcommwcn3910Match-

Node

qualcommwcn3950_firmwareMatch-

AND

qualcommwcn3950Match-

Node

qualcommwcn3988_firmwareMatch-

AND

qualcommwcn3988Match-

Node

qualcommwcn3991_firmwareMatch-

AND

qualcommwcn3991Match-

Node

qualcommwcn3998_firmwareMatch-

AND

qualcommwcn3998Match-

Node

qualcommwcn6850_firmwareMatch-

AND

qualcommwcn6850Match-

Node

qualcommwcn6851_firmwareMatch-

AND

qualcommwcn6851Match-

Node

qualcommwsa8810_firmwareMatch-

AND

qualcommwsa8810Match-

Node

qualcommwsa8815_firmwareMatch-

AND

qualcommwsa8815Match-

Node

qualcommwsa8830_firmwareMatch-

AND

qualcommwsa8830Match-

Node

qualcommwsa8835_firmwareMatch-

AND

qualcommwsa8835Match-

VendorProductVersionCPE
qualcommapq8053_firmware-cpe:2.3:o:qualcomm:apq8053_firmware:-:*:*:*:*:*:*:*
qualcommapq8053-cpe:2.3:h:qualcomm:apq8053:-:*:*:*:*:*:*:*
qualcommmsm8953_firmware-cpe:2.3:o:qualcomm:msm8953_firmware:-:*:*:*:*:*:*:*
qualcommmsm8953-cpe:2.3:h:qualcomm:msm8953:-:*:*:*:*:*:*:*
qualcommqca6390_firmware-cpe:2.3:o:qualcomm:qca6390_firmware:-:*:*:*:*:*:*:*
qualcommqca6390-cpe:2.3:h:qualcomm:qca6390:-:*:*:*:*:*:*:*
qualcommqca6391_firmware-cpe:2.3:o:qualcomm:qca6391_firmware:-:*:*:*:*:*:*:*
qualcommqca6391-cpe:2.3:h:qualcomm:qca6391:-:*:*:*:*:*:*:*
qualcommqca6426_firmware-cpe:2.3:o:qualcomm:qca6426_firmware:-:*:*:*:*:*:*:*
qualcommqca6426-cpe:2.3:h:qualcomm:qca6426:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
qualcomm	apq8053_firmware	-	cpe:2.3:o:qualcomm:apq8053_firmware:-:::::::*
qualcomm	apq8053	-	cpe:2.3:h:qualcomm:apq8053:-:::::::*
qualcomm	msm8953_firmware	-	cpe:2.3:o:qualcomm:msm8953_firmware:-:::::::*
qualcomm	msm8953	-	cpe:2.3:h:qualcomm:msm8953:-:::::::*
qualcomm	qca6390_firmware	-	cpe:2.3:o:qualcomm:qca6390_firmware:-:::::::*
qualcomm	qca6390	-	cpe:2.3:h:qualcomm:qca6390:-:::::::*
qualcomm	qca6391_firmware	-	cpe:2.3:o:qualcomm:qca6391_firmware:-:::::::*
qualcomm	qca6391	-	cpe:2.3:h:qualcomm:qca6391:-:::::::*
qualcomm	qca6426_firmware	-	cpe:2.3:o:qualcomm:qca6426_firmware:-:::::::*
qualcomm	qca6426	-	cpe:2.3:h:qualcomm:qca6426:-:::::::*

Rows per page:

1-10 of 881

CNA Affected

[
  {
    "product": "Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "APQ8053, MSM8953, QCA6390, QCA6391, QCA6426, QCA6436, QCM2290, QCM4290, QCS2290, QCS4290, QRB5165, QRB5165M, QRB5165N, SD460, SD662, SD680, SD690 5G, SD750G, SD765, SD765G, SD768G, SD865 5G, SD870, SDX55M, SDXR2 5G, SM7250P, WCD9326, WCD9370, WCD9375, WCD9380, WCD9385, WCN3615, WCN3680B, WCN3910, WCN3950, WCN3988, WCN3991, WCN3998, WCN6850, WCN6851, WSA8810, WSA8815, WSA8830, WSA8835"
      }
    ]
  }
]

References

www.qualcomm.com/company/product-security/bulletins/june-2022-bulletin

Social References

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

6.7

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

Percentile

12.6%

JSON

Related for CVE-2021-35121