CVE-2021-35074

EPSS 0.19%
Veröffentlicht 11.02.2022 11:15:08
Zuletzt bearbeitet 21.11.2024 06:11:48
Erkennungen
Login

Possible integer overflow due to improper fragment datatype while calculating number of fragments in a request message in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

Betroffene Produkte Warnungen 0 Metriken 4 CWE 1 Referenzen 4

NVD 41 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Qualcomm ≫ Ar8035 Firmware Version -

Qualcomm ≫ Ar8035 Version -

Qualcomm ≫ Qca6174a Firmware Version -

Qualcomm ≫ Qca6174a Version -

Qualcomm ≫ Qca6391 Firmware Version -

Qualcomm ≫ Qca6391 Version -

Qualcomm ≫ Qca6574au Firmware Version -

Qualcomm ≫ Qca6574au Version -

Qualcomm ≫ Qca6595au Firmware Version -

Qualcomm ≫ Qca6595au Version -

Qualcomm ≫ Qca6696 Firmware Version -

Qualcomm ≫ Qca6696 Version -

Qualcomm ≫ Qca8081 Firmware Version -

Qualcomm ≫ Qca8081 Version -

Qualcomm ≫ Qca8337 Firmware Version -

Qualcomm ≫ Qca8337 Version -

Qualcomm ≫ Qca9377 Firmware Version -

Qualcomm ≫ Qca9377 Version -

Qualcomm ≫ Qcm6490 Firmware Version -

Qualcomm ≫ Qcm6490 Version -

Qualcomm ≫ Qcs6490 Firmware Version -

Qualcomm ≫ Qcs6490 Version -

Qualcomm ≫ Sa6145p Firmware Version -

Qualcomm ≫ Sa6145p Version -

Qualcomm ≫ Sa6150p Firmware Version -

Qualcomm ≫ Sa6150p Version -

Qualcomm ≫ Sa6155p Firmware Version -

Qualcomm ≫ Sa6155p Version -

Qualcomm ≫ Sa8145p Firmware Version -

Qualcomm ≫ Sa8145p Version -

Qualcomm ≫ Sa8150p Firmware Version -

Qualcomm ≫ Sa8150p Version -

Qualcomm ≫ Sa8155p Firmware Version -

Qualcomm ≫ Sa8155p Version -

Qualcomm ≫ Sa8195p Firmware Version -

Qualcomm ≫ Sa8195p Version -

Qualcomm ≫ Sd 8 Gen1 5g Firmware Version -

Qualcomm ≫ Sm8475 Version -

Qualcomm ≫ Sd480 Firmware Version -

Qualcomm ≫ Sd480 Version -

Qualcomm ≫ Sd888 5g Firmware Version -

Qualcomm ≫ Sd888 5g Version -

Qualcomm ≫ Sdx12 Firmware Version -

Qualcomm ≫ Sdx12 Version -

Qualcomm ≫ Sdx65 Firmware Version -

Qualcomm ≫ Sdx65 Version -

Qualcomm ≫ Sm6375 Firmware Version -

Qualcomm ≫ Sm6375 Version -

Qualcomm ≫ Wcd9335 Firmware Version -

Qualcomm ≫ Wcd9335 Version -

Qualcomm ≫ Wcd9370 Firmware Version -

Qualcomm ≫ Wcd9370 Version -

Qualcomm ≫ Wcd9375 Firmware Version -

Qualcomm ≫ Wcd9375 Version -

Qualcomm ≫ Wcd9380 Firmware Version -

Qualcomm ≫ Wcd9380 Version -

Qualcomm ≫ Wcd9385 Firmware Version -

Qualcomm ≫ Wcd9385 Version -

Qualcomm ≫ Wcn3988 Firmware Version -

Qualcomm ≫ Wcn3988 Version -

Qualcomm ≫ Wcn3991 Firmware Version -

Qualcomm ≫ Wcn3991 Version -

Qualcomm ≫ Wcn3998 Firmware Version -

Qualcomm ≫ Wcn3998 Version -

Qualcomm ≫ Wcn6750 Firmware Version -

Qualcomm ≫ Wcn6750 Version -

Qualcomm ≫ Wcn6850 Firmware Version -

Qualcomm ≫ Wcn6850 Version -

Qualcomm ≫ Wcn6851 Firmware Version -

Qualcomm ≫ Wcn6851 Version -

Qualcomm ≫ Wcn6855 Firmware Version -

Qualcomm ≫ Wcn6855 Version -

Qualcomm ≫ Wcn6856 Firmware Version -

Qualcomm ≫ Wcn6856 Version -

Qualcomm ≫ Wsa8810 Firmware Version -

Qualcomm ≫ Wsa8810 Version -

Qualcomm ≫ Wsa8815 Firmware Version -

Qualcomm ≫ Wsa8815 Version -

Qualcomm ≫ Wsa8830 Firmware Version -

Qualcomm ≫ Wsa8830 Version -

Qualcomm ≫ Wsa8835 Firmware Version -

Qualcomm ≫ Wsa8835 Version -

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.19%	0.086

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NIST	7.2	3.9	10	AV:L/AC:L/Au:N/C:C/I:C/A:C
Qualcomm	8.4	2.5	5.9	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-190 Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

https://www.qualcomm.com/company/product-security/bulletins/february-2022-bulletin

Patch

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2021-35074

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2021-35074

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2021-35074

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2021-35074