CVE-2021-35126

EPSS 0.16%
Veröffentlicht 14.06.2022 10:15:17
Zuletzt bearbeitet 21.11.2024 06:11:59
Erkennungen
Login

Memory corruption in DSP service due to improper validation of input parameters in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

Betroffene Produkte Warnungen 0 Metriken 4 CWE 1 Referenzen 4

NVD 26 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Qualcomm ≫ Qam8295p Firmware Version -

Qualcomm ≫ Qam8295p Version -

Qualcomm ≫ Qca6391 Firmware Version -

Qualcomm ≫ Qca6391 Version -

Qualcomm ≫ Qca6696 Firmware Version -

Qualcomm ≫ Qca6696 Version -

Qualcomm ≫ Qcm6490 Firmware Version -

Qualcomm ≫ Qcm6490 Version -

Qualcomm ≫ Qcs6490 Firmware Version -

Qualcomm ≫ Qcs6490 Version -

Qualcomm ≫ Sa8295p Firmware Version -

Qualcomm ≫ Sa8295p Version -

Qualcomm ≫ Sd 8 Gen1 5g Firmware Version -

Qualcomm ≫ Sm8475 Version -

Qualcomm ≫ Sd 8cx Gen3 Firmware Version -

Qualcomm ≫ Sd 8cx Gen3 Version -

Qualcomm ≫ Sd778g Firmware Version -

Qualcomm ≫ Sd778g Version -

Qualcomm ≫ Sd780g Firmware Version -

Qualcomm ≫ Sd780g Version -

Qualcomm ≫ Sd888 Firmware Version -

Qualcomm ≫ Sd888 Version -

Qualcomm ≫ Sd888 5g Firmware Version -

Qualcomm ≫ Sd888 5g Version -

Qualcomm ≫ Sm7315 Firmware Version -

Qualcomm ≫ Sm7315 Version -

Qualcomm ≫ Sm7325p Firmware Version -

Qualcomm ≫ Sm7325p Version -

Qualcomm ≫ Wcd9370 Firmware Version -

Qualcomm ≫ Wcd9370 Version -

Qualcomm ≫ Wcd9375 Firmware Version -

Qualcomm ≫ Wcd9375 Version -

Qualcomm ≫ Wcd9380 Firmware Version -

Qualcomm ≫ Wcd9380 Version -

Qualcomm ≫ Wcd9385 Firmware Version -

Qualcomm ≫ Wcd9385 Version -

Qualcomm ≫ Wcn6740 Firmware Version -

Qualcomm ≫ Wcn6740 Version -

Qualcomm ≫ Wcn6750 Firmware Version -

Qualcomm ≫ Wcn6750 Version -

Qualcomm ≫ Wcn6850 Firmware Version -

Qualcomm ≫ Wcn6850 Version -

Qualcomm ≫ Wcn6851 Firmware Version -

Qualcomm ≫ Wcn6851 Version -

Qualcomm ≫ Wcn6855 Firmware Version -

Qualcomm ≫ Wcn6855 Version -

Qualcomm ≫ Wcn6856 Firmware Version -

Qualcomm ≫ Wcn6856 Version -

Qualcomm ≫ Wsa8830 Firmware Version -

Qualcomm ≫ Wsa8830 Version -

Qualcomm ≫ Wsa8835 Firmware Version -

Qualcomm ≫ Wsa8835 Version -

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.16%	0.054

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NIST	7.2	3.9	10	AV:L/AC:L/Au:N/C:C/I:C/A:C
Qualcomm	8.4	2.5	5.9	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-129 Improper Validation of Array Index

The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.

https://www.qualcomm.com/company/product-security/bulletins/april-2022-bulletin

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2021-35126

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2021-35126

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2021-35126

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2021-35126