7.8

CVE-2021-35129

Memory corruption in BT controller due to improper length check while processing vendor specific commands in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking

Data is provided by the National Vulnerability Database (NVD)
Qualcomm ≫ Ar8035 Firmware Version-
   Qualcomm ≫ Ar8035 Version-
Qualcomm ≫ Ipq5010 Firmware Version-
   Qualcomm ≫ Ipq5010 Version-
Qualcomm ≫ Ipq5018 Firmware Version-
   Qualcomm ≫ Ipq5018 Version-
Qualcomm ≫ Ipq5028 Firmware Version-
   Qualcomm ≫ Ipq5028 Version-
Qualcomm ≫ Qca2062 Firmware Version-
   Qualcomm ≫ Qca2062 Version-
Qualcomm ≫ Qca2064 Firmware Version-
   Qualcomm ≫ Qca2064 Version-
Qualcomm ≫ Qca2065 Firmware Version-
   Qualcomm ≫ Qca2065 Version-
Qualcomm ≫ Qca2066 Firmware Version-
   Qualcomm ≫ Qca2066 Version-
Qualcomm ≫ Qca6391 Firmware Version-
   Qualcomm ≫ Qca6391 Version-
Qualcomm ≫ Qca8081 Firmware Version-
   Qualcomm ≫ Qca8081 Version-
Qualcomm ≫ Qca8337 Firmware Version-
   Qualcomm ≫ Qca8337 Version-
Qualcomm ≫ Qcc710 Firmware Version-
   Qualcomm ≫ Qcc710 Version-
Qualcomm ≫ Qcm6490 Firmware Version-
   Qualcomm ≫ Qcm6490 Version-
Qualcomm ≫ Qcn6023 Firmware Version-
   Qualcomm ≫ Qcn6023 Version-
Qualcomm ≫ Qcn6024 Firmware Version-
   Qualcomm ≫ Qcn6024 Version-
Qualcomm ≫ Qcn6100 Firmware Version-
   Qualcomm ≫ Qcn6100 Version-
Qualcomm ≫ Qcn6102 Firmware Version-
   Qualcomm ≫ Qcn6102 Version-
Qualcomm ≫ Qcn6112 Firmware Version-
   Qualcomm ≫ Qcn6112 Version-
Qualcomm ≫ Qcn6122 Firmware Version-
   Qualcomm ≫ Qcn6122 Version-
Qualcomm ≫ Qcn6132 Firmware Version-
   Qualcomm ≫ Qcn6132 Version-
Qualcomm ≫ Qcn9000 Firmware Version-
   Qualcomm ≫ Qcn9000 Version-
Qualcomm ≫ Qcn9012 Firmware Version-
   Qualcomm ≫ Qcn9012 Version-
Qualcomm ≫ Qcn9022 Firmware Version-
   Qualcomm ≫ Qcn9022 Version-
Qualcomm ≫ Qcn9024 Firmware Version-
   Qualcomm ≫ Qcn9024 Version-
Qualcomm ≫ Qcn9070 Firmware Version-
   Qualcomm ≫ Qcn9070 Version-
Qualcomm ≫ Qcn9072 Firmware Version-
   Qualcomm ≫ Qcn9072 Version-
Qualcomm ≫ Qcn9074 Firmware Version-
   Qualcomm ≫ Qcn9074 Version-
Qualcomm ≫ Qcn9100 Firmware Version-
   Qualcomm ≫ Qcn9100 Version-
Qualcomm ≫ Qcs6490 Firmware Version-
   Qualcomm ≫ Qcs6490 Version-
Qualcomm ≫ Sd 8 Gen1 5g Firmware Version-
   Qualcomm ≫ Sm8475 Version-
Qualcomm ≫ Sd 8cx Gen3 Firmware Version-
   Qualcomm ≫ Sd 8cx Gen3 Version-
Qualcomm ≫ Sd888 Firmware Version-
   Qualcomm ≫ Sd888 Version-
Qualcomm ≫ Sd888 5g Firmware Version-
   Qualcomm ≫ Sd888 5g Version-
Qualcomm ≫ Sdx65 Firmware Version-
   Qualcomm ≫ Sdx65 Version-
Qualcomm ≫ Wcd9370 Firmware Version-
   Qualcomm ≫ Wcd9370 Version-
Qualcomm ≫ Wcd9375 Firmware Version-
   Qualcomm ≫ Wcd9375 Version-
Qualcomm ≫ Wcd9380 Firmware Version-
   Qualcomm ≫ Wcd9380 Version-
Qualcomm ≫ Wcd9385 Firmware Version-
   Qualcomm ≫ Wcd9385 Version-
Qualcomm ≫ Wcn6750 Firmware Version-
   Qualcomm ≫ Wcn6750 Version-
Qualcomm ≫ Wcn6850 Firmware Version-
   Qualcomm ≫ Wcn6850 Version-
Qualcomm ≫ Wcn6851 Firmware Version-
   Qualcomm ≫ Wcn6851 Version-
Qualcomm ≫ Wcn6855 Firmware Version-
   Qualcomm ≫ Wcn6855 Version-
Qualcomm ≫ Wcn6856 Firmware Version-
   Qualcomm ≫ Wcn6856 Version-
Qualcomm ≫ Wsa8830 Firmware Version-
   Qualcomm ≫ Wsa8830 Version-
Qualcomm ≫ Wsa8835 Firmware Version-
   Qualcomm ≫ Wsa8835 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.11% 0.302
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
product-security@qualcomm.com 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.