CVE-2021-35115

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 01-04-2022 07:15

Last modified: - 09-04-2022 02:30

Total changes: - 2

Description

Improper handling of multiple session supported by PVM backend can lead to use after free in Snapdragon Auto, Snapdragon Mobile

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Low

Attack complexity

Local

Attack vector

High

Availability

High

Confidentiality

High

Integrity

Low

Privileges required

Unchanged

Scope

None

User interaction

7.8

Base score

1.8

5.9

Exploitability score

Impact score

Verification logic

AND

vendor=qualcomm AND product=apq8096au_firmware AND version=-

vendor=qualcomm AND product=apq8096au AND version=-

AND

vendor=qualcomm AND product=ar6003_firmware AND version=-

vendor=qualcomm AND product=ar6003 AND version=-

AND

vendor=qualcomm AND product=mdm8215_firmware AND version=-

vendor=qualcomm AND product=mdm8215 AND version=-

AND

vendor=qualcomm AND product=mdm8215m_firmware AND version=-

vendor=qualcomm AND product=mdm8215m AND version=-

AND

vendor=qualcomm AND product=mdm8615m_firmware AND version=-

vendor=qualcomm AND product=mdm8615m AND version=-

AND

vendor=qualcomm AND product=mdm9215_firmware AND version=-

vendor=qualcomm AND product=mdm9215 AND version=-

AND

vendor=qualcomm AND product=mdm9310_firmware AND version=-

vendor=qualcomm AND product=mdm9310 AND version=-

AND

vendor=qualcomm AND product=mdm9615_firmware AND version=-

vendor=qualcomm AND product=mdm9615 AND version=-

AND

vendor=qualcomm AND product=mdm9615m_firmware AND version=-

vendor=qualcomm AND product=mdm9615m AND version=-

AND

vendor=qualcomm AND product=msm8996au_firmware AND version=-

vendor=qualcomm AND product=msm8996au AND version=-

AND

vendor=qualcomm AND product=qca6564a_firmware AND version=-

vendor=qualcomm AND product=qca6564a AND version=-

AND

vendor=qualcomm AND product=qca6564au_firmware AND version=-

vendor=qualcomm AND product=qca6564au AND version=-

AND

vendor=qualcomm AND product=qca6574a_firmware AND version=-

vendor=qualcomm AND product=qca6574a AND version=-

AND

vendor=qualcomm AND product=qca6574au_firmware AND version=-

vendor=qualcomm AND product=qca6574au AND version=-

AND

vendor=qualcomm AND product=qca6584au_firmware AND version=-

vendor=qualcomm AND product=qca6584au AND version=-

AND

vendor=qualcomm AND product=qca6696_firmware AND version=-

vendor=qualcomm AND product=qca6696 AND version=-

AND

vendor=qualcomm AND product=sa6145p_firmware AND version=-

vendor=qualcomm AND product=sa6145p AND version=-

AND

vendor=qualcomm AND product=sa6150p_firmware AND version=-

vendor=qualcomm AND product=sa6150p AND version=-

AND

vendor=qualcomm AND product=sa6155p_firmware AND version=-

vendor=qualcomm AND product=sa6155p AND version=-

AND

vendor=qualcomm AND product=sa8145p_firmware AND version=-

vendor=qualcomm AND product=sa8145p AND version=-

AND

vendor=qualcomm AND product=sa8150p_firmware AND version=-

vendor=qualcomm AND product=sa8150p AND version=-

AND

vendor=qualcomm AND product=sa8155p_firmware AND version=-

vendor=qualcomm AND product=sa8155p AND version=-

AND

vendor=qualcomm AND product=sa8195p_firmware AND version=-

vendor=qualcomm AND product=sa8195p AND version=-

AND

vendor=qualcomm AND product=sa8540p_firmware AND version=-

vendor=qualcomm AND product=sa8540p AND version=-

AND

vendor=qualcomm AND product=sa9000p_firmware AND version=-

vendor=qualcomm AND product=sa9000p AND version=-

AND

vendor=qualcomm AND product=sdx55_firmware AND version=-

vendor=qualcomm AND product=sdx55 AND version=-

AND

vendor=qualcomm AND product=sdx55m_firmware AND version=-

vendor=qualcomm AND product=sdx55m AND version=-

AND

vendor=qualcomm AND product=wcd9341_firmware AND version=-

vendor=qualcomm AND product=wcd9341 AND version=-

Reference

https://www.qualcomm.com/company/product-security/bulletins/march-2022-bulletin

Keywords

CVE-2021-35115

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2021-35115

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures