CVE-2021-35102

EPSS 0.1%
Veröffentlicht 14.06.2022 10:15:16
Zuletzt bearbeitet 21.11.2024 06:11:54
Quelle product-security@qualcomm.com
Teams Watchlist Login
Unerledigt Login

Possible buffer overflow due to lack of validation for the length of NAI string read from EFS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile

Betroffene Produkte Warnungen 0 Metriken 4 CWE 1 Referenzen 4

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Qualcomm ≫ Ar8035 Firmware Version-

Qualcomm ≫ Ar8035 Version-

Qualcomm ≫ Qca6390 Firmware Version-

Qualcomm ≫ Qca6390 Version-

Qualcomm ≫ Qca6391 Firmware Version-

Qualcomm ≫ Qca6391 Version-

Qualcomm ≫ Qca6421 Firmware Version-

Qualcomm ≫ Qca6421 Version-

Qualcomm ≫ Qca6426 Firmware Version-

Qualcomm ≫ Qca6426 Version-

Qualcomm ≫ Qca6431 Firmware Version-

Qualcomm ≫ Qca6431 Version-

Qualcomm ≫ Qca6436 Firmware Version-

Qualcomm ≫ Qca6436 Version-

Qualcomm ≫ Qca6574a Firmware Version-

Qualcomm ≫ Qca6574a Version-

Qualcomm ≫ Qca6574au Firmware Version-

Qualcomm ≫ Qca6574au Version-

Qualcomm ≫ Qca6595au Firmware Version-

Qualcomm ≫ Qca6595au Version-

Qualcomm ≫ Qca6696 Firmware Version-

Qualcomm ≫ Qca6696 Version-

Qualcomm ≫ Qca8081 Firmware Version-

Qualcomm ≫ Qca8081 Version-

Qualcomm ≫ Qca8337 Firmware Version-

Qualcomm ≫ Qca8337 Version-

Qualcomm ≫ Sa515m Firmware Version-

Qualcomm ≫ Sa515m Version-

Qualcomm ≫ Sd 675 Firmware Version-

Qualcomm ≫ Sd 675 Version-

Qualcomm ≫ Sd 8 Gen1 5g Firmware Version-

Qualcomm ≫ Sm8475 Version-

Qualcomm ≫ Sd480 Firmware Version-

Qualcomm ≫ Sd480 Version-

Qualcomm ≫ Sd675 Firmware Version-

Qualcomm ≫ Sd675 Version-

Qualcomm ≫ Sd678 Firmware Version-

Qualcomm ≫ Sd678 Version-

Qualcomm ≫ Sd690 5g Firmware Version-

Qualcomm ≫ Sd690 5g Version-

Qualcomm ≫ Sd695 Firmware Version-

Qualcomm ≫ Sd695 Version-

Qualcomm ≫ Sd720g Firmware Version-

Qualcomm ≫ Sd720g Version-

Qualcomm ≫ Sd730 Firmware Version-

Qualcomm ≫ Sd730 Version-

Qualcomm ≫ Sd750g Firmware Version-

Qualcomm ≫ Sd750g Version-

Qualcomm ≫ Sd765 Firmware Version-

Qualcomm ≫ Sd765 Version-

Qualcomm ≫ Sd765g Firmware Version-

Qualcomm ≫ Sd765g Version-

Qualcomm ≫ Sd768g Firmware Version-

Qualcomm ≫ Sd768g Version-

Qualcomm ≫ Sd778g Firmware Version-

Qualcomm ≫ Sd778g Version-

Qualcomm ≫ Sd780g Firmware Version-

Qualcomm ≫ Sd780g Version-

Qualcomm ≫ Sd855 Firmware Version-

Qualcomm ≫ Sd855 Version-

Qualcomm ≫ Sd865 5g Firmware Version-

Qualcomm ≫ Sd865 5g Version-

Qualcomm ≫ Sd870 Firmware Version-

Qualcomm ≫ Sd870 Version-

Qualcomm ≫ Sd888 Firmware Version-

Qualcomm ≫ Sd888 Version-

Qualcomm ≫ Sd888 5g Firmware Version-

Qualcomm ≫ Sd888 5g Version-

Qualcomm ≫ Sdx55 Firmware Version-

Qualcomm ≫ Sdx55 Version-

Qualcomm ≫ Sdx55m Firmware Version-

Qualcomm ≫ Sdx55m Version-

Qualcomm ≫ Sdx65 Firmware Version-

Qualcomm ≫ Sdx65 Version-

Qualcomm ≫ Sdxr2 5g Firmware Version-

Qualcomm ≫ Sdxr2 5g Version-

Qualcomm ≫ Sm6250 Firmware Version-

Qualcomm ≫ Sm6250 Version-

Qualcomm ≫ Sm6250p Firmware Version-

Qualcomm ≫ Sm6250p Version-

Qualcomm ≫ Sm7250p Firmware Version-

Qualcomm ≫ Sm7250p Version-

Qualcomm ≫ Sm7315 Firmware Version-

Qualcomm ≫ Sm7315 Version-

Qualcomm ≫ Sm7450 Firmware Version-

Qualcomm ≫ Sm7450 Version-

Qualcomm ≫ Sm8475 Firmware Version-

Qualcomm ≫ Sm8475 Version-

Qualcomm ≫ Sm8475p Firmware Version-

Qualcomm ≫ Sm8475p Version-

Qualcomm ≫ Wcd9341 Firmware Version-

Qualcomm ≫ Wcd9341 Version-

Qualcomm ≫ Wcd9360 Firmware Version-

Qualcomm ≫ Wcd9360 Version-

Qualcomm ≫ Wcd9370 Firmware Version-

Qualcomm ≫ Wcd9370 Version-

Qualcomm ≫ Wcd9375 Firmware Version-

Qualcomm ≫ Wcd9375 Version-

Qualcomm ≫ Wcd9380 Firmware Version-

Qualcomm ≫ Wcd9380 Version-

Qualcomm ≫ Wcd9385 Firmware Version-

Qualcomm ≫ Wcd9385 Version-

Qualcomm ≫ Wcn3950 Firmware Version-

Qualcomm ≫ Wcn3950 Version-

Qualcomm ≫ Wcn3980 Firmware Version-

Qualcomm ≫ Wcn3980 Version-

Qualcomm ≫ Wcn3988 Firmware Version-

Qualcomm ≫ Wcn3988 Version-

Qualcomm ≫ Wcn3990 Firmware Version-

Qualcomm ≫ Wcn3990 Version-

Qualcomm ≫ Wcn3991 Firmware Version-

Qualcomm ≫ Wcn3991 Version-

Qualcomm ≫ Wcn3998 Firmware Version-

Qualcomm ≫ Wcn3998 Version-

Qualcomm ≫ Wcn6740 Firmware Version-

Qualcomm ≫ Wcn6740 Version-

Qualcomm ≫ Wcn6750 Firmware Version-

Qualcomm ≫ Wcn6750 Version-

Qualcomm ≫ Wcn6850 Firmware Version-

Qualcomm ≫ Wcn6850 Version-

Qualcomm ≫ Wcn6851 Firmware Version-

Qualcomm ≫ Wcn6851 Version-

Qualcomm ≫ Wcn6855 Firmware Version-

Qualcomm ≫ Wcn6855 Version-

Qualcomm ≫ Wcn6856 Firmware Version-

Qualcomm ≫ Wcn6856 Version-

Qualcomm ≫ Wcn7851 Firmware Version-

Qualcomm ≫ Wcn7851 Version-

Qualcomm ≫ Wsa8810 Firmware Version-

Qualcomm ≫ Wsa8810 Version-

Qualcomm ≫ Wsa8815 Firmware Version-

Qualcomm ≫ Wsa8815 Version-

Qualcomm ≫ Wsa8830 Firmware Version-

Qualcomm ≫ Wsa8830 Version-

Qualcomm ≫ Wsa8832 Firmware Version-

Qualcomm ≫ Wsa8832 Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.1%	0.279

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	7.2	3.9	10	AV:L/AC:L/Au:N/C:C/I:C/A:C
product-security@qualcomm.com	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

https://www.qualcomm.com/company/product-security/bulletins/june-2022-bulletin

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2021-35102

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2021-35102

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2021-35102

EUVD