Lucene search

[email protected]CVE-2021-35095

HistoryJun 14, 2022 - 10:15 a.m.

CVE-2021-35095

2022-06-1410:15:00

CWE-502

[email protected]

web.nvd.nist.gov

cve-2021-35095

improper serialization

message queue client

race condition

snapdragon connectivity

snapdragon mobile

nvd

7 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

11.6%

JSON

Improper serialization of message queue client registration can lead to race condition allowing multiple gunyah message clients to register with same label in Snapdragon Connectivity, Snapdragon Mobile

CPENameOperatorVersion
qualcomm:ar8035_firmwarequalcomm ar8035 firmwareeq-
qualcomm:qca8081_firmwarequalcomm qca8081 firmwareeq-
qualcomm:qca8337_firmwarequalcomm qca8337 firmwareeq-
qualcomm:sd_8_gen1_5g_firmwarequalcomm sd 8 gen1 5g firmwareeq-
qualcomm:sdx65_firmwarequalcomm sdx65 firmwareeq-
qualcomm:wcd9380_firmwarequalcomm wcd9380 firmwareeq-
qualcomm:wcn6855_firmwarequalcomm wcn6855 firmwareeq-
qualcomm:wcn6856_firmwarequalcomm wcn6856 firmwareeq-
qualcomm:wsa8830_firmwarequalcomm wsa8830 firmwareeq-
qualcomm:wsa8835_firmwarequalcomm wsa8835 firmwareeq-

CPE	Name	Operator	Version
qualcomm:ar8035_firmware	qualcomm ar8035 firmware	eq	-
qualcomm:qca8081_firmware	qualcomm qca8081 firmware	eq	-
qualcomm:qca8337_firmware	qualcomm qca8337 firmware	eq	-
qualcomm:sd_8_gen1_5g_firmware	qualcomm sd 8 gen1 5g firmware	eq	-
qualcomm:sdx65_firmware	qualcomm sdx65 firmware	eq	-
qualcomm:wcd9380_firmware	qualcomm wcd9380 firmware	eq	-
qualcomm:wcn6855_firmware	qualcomm wcn6855 firmware	eq	-
qualcomm:wcn6856_firmware	qualcomm wcn6856 firmware	eq	-
qualcomm:wsa8830_firmware	qualcomm wsa8830 firmware	eq	-
qualcomm:wsa8835_firmware	qualcomm wsa8835 firmware	eq	-

References

www.qualcomm.com/company/product-security/bulletins/april-2022-bulletin

Social References

7 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

11.6%

JSON

Related for CVE-2021-35095

prion1