CVE-2021-35095

Improper serialization of message queue client registration can lead to race condition allowing multiple gunyah message clients to register with same label in Snapdragon Connectivity, Snapdragon Mobile
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:qualcomm:ar8035_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:ar8035:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:qualcomm:qca8081_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca8081:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:qualcomm:qca8337_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca8337:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:qualcomm:sd_8_gen1_5g_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sm8475:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:qualcomm:sdx65_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sdx65:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:qualcomm:wcd9380_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9380:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:qualcomm:wcn6855_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn6855:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:qualcomm:wcn6856_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn6856:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:qualcomm:wsa8830_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8830:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:qualcomm:wsa8835_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8835:-:*:*:*:*:*:*:*

History

21 Nov 2024, 06:11

Type Values Removed Values Added
References () https://www.qualcomm.com/company/product-security/bulletins/april-2022-bulletin - Patch, Vendor Advisory () https://www.qualcomm.com/company/product-security/bulletins/april-2022-bulletin - Patch, Vendor Advisory
CVSS v2 : 6.9
v3 : 7.0
v2 : 6.9
v3 : 8.4

08 Aug 2023, 14:21

Type Values Removed Values Added
CWE CWE-362 CWE-502

Information

Published : 2022-06-14 10:15

Updated : 2024-11-21 06:11


NVD link : CVE-2021-35095

Mitre link : CVE-2021-35095

CVE.ORG link : CVE-2021-35095


JSON object : View

Products Affected

qualcomm

  • sdx65_firmware
  • wcn6855_firmware
  • ar8035_firmware
  • wsa8835
  • sm8475
  • qca8081
  • qca8337_firmware
  • wcn6855
  • qca8081_firmware
  • wsa8830_firmware
  • wcd9380
  • wcn6856
  • wsa8830
  • wsa8835_firmware
  • qca8337
  • wcd9380_firmware
  • wcn6856_firmware
  • sdx65
  • ar8035
  • sd_8_gen1_5g_firmware
CWE
CWE-502

Deserialization of Untrusted Data