CVE-2021-35097

🗓️ 02 Sep 2022 11:30:55Reported by qualcommType

CVE-2021-35097 Possible authentication bypass due to improper order of signature verification and hashing in the signature verification call in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearable

Reporter	Title	Published	Views	Family All 7
CNNVD	Qualcomm 芯片数据伪造问题漏洞	7 Jun 202200:00	–	cnnvd
Cvelist	CVE-2021-35097	2 Sep 202211:30	–	cvelist
NCSC	Vulnerabilities fixed in Google Android and Samsung Mobile	4 Jan 202300:00	–	ncsc
NVD	CVE-2021-35097	2 Sep 202212:15	–	nvd
Prion	Authentication flaw	2 Sep 202212:15	–	prion
Positive Technologies	PT-2022-10417 · Qualcomm · Qualcomm Snapdragon	2 Sep 202200:00	–	ptsecurity
RedhatCVE	CVE-2021-35097	2 Sep 202217:57	–	redhatcve

NVD

Node

qualcomm aqt1000_firmwareMatch-

AND

qualcomm aqt1000Match-

Node

qualcomm ar8031_firmwareMatch-

AND

qualcomm ar8031Match-

Node

qualcomm ar8035_firmwareMatch-

AND

qualcomm ar8035Match-

Node

qualcomm csra6620_firmwareMatch-

AND

qualcomm csra6620Match-

Node

qualcomm csra6640_firmwareMatch-

AND

qualcomm csra6640Match-

Node

qualcomm csrb31024_firmwareMatch-

AND

qualcomm csrb31024Match-

Node

qualcomm mdm9150_firmwareMatch-

AND

qualcomm mdm9150Match-

Node

qualcomm qca6174a_firmwareMatch-

AND

qualcomm qca6174aMatch-

Node

qualcomm qca6175a_firmwareMatch-

AND

qualcomm qca6175aMatch-

Node

qualcomm qca6310_firmwareMatch-

AND

qualcomm qca6310Match-

Node

qualcomm qca6335_firmwareMatch-

AND

qualcomm qca6335Match-

Node

qualcomm qca6390_firmwareMatch-

AND

qualcomm qca6390Match-

Node

qualcomm qca6391_firmwareMatch-

AND

qualcomm qca6391Match-

Node

qualcomm qca6420_firmwareMatch-

AND

qualcomm qca6420Match-

Node

qualcomm qca6421_firmwareMatch-

AND

qualcomm qca6421Match-

Node

qualcomm qca6426_firmwareMatch-

AND

qualcomm qca6426Match-

Node

qualcomm qca6430_firmwareMatch-

AND

qualcomm qca6430Match-

Node

qualcomm qca6431_firmwareMatch-

AND

qualcomm qca6431Match-

Node

qualcomm qca6436_firmwareMatch-

AND

qualcomm qca6436Match-

Node

qualcomm qca6564_firmwareMatch-

AND

qualcomm qca6564Match-

Node

qualcomm qca6564a_firmwareMatch-

AND

qualcomm qca6564aMatch-

Node

qualcomm qca6564au_firmwareMatch-

AND

qualcomm qca6564auMatch-

Node

qualcomm qca6574_firmwareMatch-

AND

qualcomm qca6574Match-

Node

qualcomm qca6574a_firmwareMatch-

AND

qualcomm qca6574aMatch-

Node

qualcomm qca6574au_firmwareMatch-

AND

qualcomm qca6574auMatch-

Node

qualcomm qca6595_firmwareMatch-

AND

qualcomm qca6595Match-

Node

qualcomm qca6595au_firmwareMatch-

AND

qualcomm qca6595auMatch-

Node

qualcomm qca6696_firmwareMatch-

AND

qualcomm qca6696Match-

Node

qualcomm qca8081_firmwareMatch-

AND

qualcomm qca8081Match-

Node

qualcomm qca8337_firmwareMatch-

AND

qualcomm qca8337Match-

Node

qualcomm qca9377_firmwareMatch-

AND

qualcomm qca9377Match-

Node

qualcomm qcm2290_firmwareMatch-

AND

qualcomm qcm2290Match-

Node

qualcomm qcm4290_firmwareMatch-

AND

qualcomm qcm4290Match-

Node

qualcomm qcm6125_firmwareMatch-

AND

qualcomm qcm6125Match-

Node

qualcomm qcm6490_firmwareMatch-

AND

qualcomm qcm6490Match-

Node

qualcomm qcs2290_firmwareMatch-

AND

qualcomm qcs2290Match-

Node

qualcomm qcs405_firmwareMatch-

AND

qualcomm qcs405Match-

Node

qualcomm qcs410_firmwareMatch-

AND

qualcomm qcs410Match-

Node

qualcomm qcs4290_firmwareMatch-

AND

qualcomm qcs4290Match-

Node

qualcomm qcs610_firmwareMatch-

AND

qualcomm qcs610Match-

Node

qualcomm qcs6125_firmwareMatch-

AND

qualcomm qcs6125Match-

Node

qualcomm qcs6490_firmwareMatch-

AND

qualcomm qcs6490Match-

Node

qualcomm qrb5165_firmwareMatch-

AND

qualcomm qrb5165Match-

Node

qualcomm qrb5165m_firmwareMatch-

AND

qualcomm qrb5165mMatch-

Node

qualcomm qrb5165n_firmwareMatch-

AND

qualcomm qrb5165nMatch-

Node

qualcomm qsm8350_firmwareMatch-

AND

qualcomm qsm8350Match-

Node

qualcomm sa415m_firmwareMatch-

AND

qualcomm sa415mMatch-

Node

qualcomm sa515m_firmwareMatch-

AND

qualcomm sa515mMatch-

Node

qualcomm sa6145p_firmwareMatch-

AND

qualcomm sa6145pMatch-

Node

qualcomm sa6155_firmwareMatch-

AND

qualcomm sa6155Match-

Node

qualcomm sa6155p_firmwareMatch-

AND

qualcomm sa6155pMatch-

Node

qualcomm sa8155_firmwareMatch-

AND

qualcomm sa8155Match-

Node

qualcomm sa8155p_firmwareMatch-

AND

qualcomm sa8155pMatch-

Node

qualcomm sa8195p_firmwareMatch-

AND

qualcomm sa8195pMatch-

Node

qualcomm sa8540p_firmwareMatch-

AND

qualcomm sa8540pMatch-

Node

qualcomm sa9000p_firmwareMatch-

AND

qualcomm sa9000pMatch-

Node

qualcomm sc8180x+sdx55_firmwareMatch-

AND

qualcomm sc8180x+sdx55Match-

Node

qualcomm sd_675_firmwareMatch-

AND

qualcomm sd_675Match-

Node

qualcomm sd_8cx_firmwareMatch-

AND

qualcomm sd_8cxMatch-

Node

qualcomm sd_8cx_gen2_firmwareMatch-

AND

qualcomm sd_8cx_gen2Match-

Node

qualcomm sd_8cx_gen3_firmwareMatch-

AND

qualcomm sd_8cx_gen3Match-

Node

qualcomm sd460_firmwareMatch-

AND

qualcomm sd460Match-

Node

qualcomm sd480_firmwareMatch-

AND

qualcomm sd480Match-

Node

qualcomm sd662_firmwareMatch-

AND

qualcomm sd662Match-

Node

qualcomm sd665_firmwareMatch-

AND

qualcomm sd665Match-

Node

qualcomm sd675_firmwareMatch-

AND

qualcomm sd675Match-

Node

qualcomm sd678_firmwareMatch-

AND

qualcomm sd678Match-

Node

qualcomm sd680_firmwareMatch-

AND

qualcomm sd680Match-

Node

qualcomm sd690_5g_firmwareMatch-

AND

qualcomm sd690_5gMatch-

Node

qualcomm sd695_firmwareMatch-

AND

qualcomm sd695Match-

Node

qualcomm sd720g_firmwareMatch-

AND

qualcomm sd720gMatch-

Node

qualcomm sd730_firmwareMatch-

AND

qualcomm sd730Match-

Node

qualcomm sd750g_firmwareMatch-

AND

qualcomm sd750gMatch-

Node

qualcomm sd765_firmwareMatch-

AND

qualcomm sd765Match-

Node

qualcomm sd765g_firmwareMatch-

AND

qualcomm sd765gMatch-

Node

qualcomm sd768g_firmwareMatch-

AND

qualcomm sd768gMatch-

Node

qualcomm sd778g_firmwareMatch-

AND

qualcomm sd778gMatch-

Node

qualcomm sd780g_firmwareMatch-

AND

qualcomm sd780gMatch-

Node

qualcomm sd7c_firmwareMatch-

AND

qualcomm sd7cMatch-

Node

qualcomm sd845_firmwareMatch-

AND

qualcomm sd845Match-

Node

qualcomm sd850_firmwareMatch-

AND

qualcomm sd850Match-

Node

qualcomm sd855_firmwareMatch-

AND

qualcomm sd855Match-

Node

qualcomm sd865_5g_firmwareMatch-

AND

qualcomm sd865_5gMatch-

Node

qualcomm sd870_firmwareMatch-

AND

qualcomm sd870Match-

Node

qualcomm sd888_firmwareMatch-

AND

qualcomm sd888Match-

Node

qualcomm sd888_5g_firmwareMatch-

AND

qualcomm sd888_5gMatch-

Node

qualcomm sdx24_firmwareMatch-

AND

qualcomm sdx24Match-

Node

qualcomm sdx50m_firmwareMatch-

AND

qualcomm sdx50mMatch-

Node

qualcomm sdx55_firmwareMatch-

AND

qualcomm sdx55Match-

Node

qualcomm sdx55m_firmwareMatch-

AND

qualcomm sdx55mMatch-

Node

qualcomm sdx65_firmwareMatch-

AND

qualcomm sdx65Match-

Node

qualcomm sdxr2_5g_firmwareMatch-

AND

qualcomm sdxr2_5gMatch-

Node

qualcomm sm4125_firmwareMatch-

AND

qualcomm sm4125Match-

Node

qualcomm sm6250_firmwareMatch-

AND

qualcomm sm6250Match-

Node

qualcomm sm6250p_firmwareMatch-

AND

qualcomm sm6250pMatch-

Node

qualcomm sm7250p_firmwareMatch-

AND

qualcomm sm7250pMatch-

Node

qualcomm sm7315_firmwareMatch-

AND

qualcomm sm7315Match-

Node

qualcomm sm7325p_firmwareMatch-

AND

qualcomm sm7325pMatch-

Node

qualcomm sw5100_firmwareMatch-

AND

qualcomm sw5100Match-

Node

qualcomm sw5100p_firmwareMatch-

AND

qualcomm sw5100pMatch-

Node

qualcomm wcd9335_firmwareMatch-

AND

qualcomm wcd9335Match-

Node

qualcomm wcd9340_firmwareMatch-

AND

qualcomm wcd9340Match-

Node

qualcomm wcd9341_firmwareMatch-

AND

qualcomm wcd9341Match-

Node

qualcomm wcd9360_firmwareMatch-

AND

qualcomm wcd9360Match-

Node

qualcomm wcd9370_firmwareMatch-

AND

qualcomm wcd9370Match-

Node

qualcomm wcd9371_firmwareMatch-

AND

qualcomm wcd9371Match-

Node

qualcomm wcd9375_firmwareMatch-

AND

qualcomm wcd9375Match-

Node

qualcomm wcd9380_firmwareMatch-

AND

qualcomm wcd9380Match-

Node

qualcomm wcd9385_firmwareMatch-

AND

qualcomm wcd9385Match-

Node

qualcomm wcn3910_firmwareMatch-

AND

qualcomm wcn3910Match-

Node

qualcomm wcn3950_firmwareMatch-

AND

qualcomm wcn3950Match-

Node

qualcomm wcn3980_firmwareMatch-

AND

qualcomm wcn3980Match-

Node

qualcomm wcn3988_firmwareMatch-

AND

qualcomm wcn3988Match-

Node

qualcomm wcn3990_firmwareMatch-

AND

qualcomm wcn3990Match-

Node

qualcomm wcn3991_firmwareMatch-

AND

qualcomm wcn3991Match-

Node

qualcomm wcn3998_firmwareMatch-

AND

qualcomm wcn3998Match-

Node

qualcomm wcn3999_firmwareMatch-

AND

qualcomm wcn3999Match-

Node

qualcomm wcn6740_firmwareMatch-

AND

qualcomm wcn6740Match-

Node

qualcomm wcn6750_firmwareMatch-

AND

qualcomm wcn6750Match-

Node

qualcomm wcn6850_firmwareMatch-

AND

qualcomm wcn6850Match-

Node

qualcomm wcn6851_firmwareMatch-

AND

qualcomm wcn6851Match-

Node

qualcomm wcn6855_firmwareMatch-

AND

qualcomm wcn6855Match-

Node

qualcomm wcn6856_firmwareMatch-

AND

qualcomm wcn6856Match-

Node

qualcomm wcn7850_firmwareMatch-

AND

qualcomm wcn7850Match-

Node

qualcomm wcn7851_firmwareMatch-

AND

qualcomm wcn7851Match-

Node

qualcomm wsa8810_firmwareMatch-

AND

qualcomm wsa8810Match-

Node

qualcomm wsa8815_firmwareMatch-

AND

qualcomm wsa8815Match-

Node

qualcomm wsa8830_firmwareMatch-

AND

qualcomm wsa8830Match-

Node

qualcomm wsa8835_firmwareMatch-

AND

qualcomm wsa8835Match-

[
  {
    "product": "Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "AQT1000, AR8031, AR8035, CSRA6620, CSRA6640, CSRB31024, MDM9150, QCA6174A, QCA6175A, QCA6310, QCA6335, QCA6390, QCA6391, QCA6420, QCA6421, QCA6426, QCA6430, QCA6431, QCA6436, QCA6564, QCA6564A, QCA6564AU, QCA6574, QCA6574A, QCA6574AU, QCA6595, QCA6595AU, QCA6696, QCA8081, QCA8337, QCA9377, QCM2290, QCM4290, QCM6125, QCM6490, QCS2290, QCS405, QCS410, QCS4290, QCS610, QCS6125, QCS6490, QRB5165, QRB5165M, QRB5165N, QSM8350, SA415M, SA515M, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SA8195P, SA8540P, SA9000P, SC8180X+SDX55, SD 675, SD 8CX, SD 8cx Gen2, SD 8cx Gen3, SD460, SD480, SD662, SD665, SD675, SD678, SD680, SD690 5G, SD695, SD720G, SD730, SD750G, SD765, SD765G, SD768G, SD778G, SD780G, SD7c, SD845, SD850, SD855, SD865 5G, SD870, SD888, SD888 5G, SDX24, SDX50M, SDX55, SDX55M, SDX65, SDXR2 5G, SM4125, SM6250, SM6250P, SM7250P, SM7315, SM7325P, SW5100, SW5100P, WCD9335, WCD9340, WCD9341, WCD9360, WCD9370, WCD9371, WCD9375, WCD9380, WCD9385, WCN3910, WCN3950, WCN3980, WCN3988, WCN3990, WCN3991, W ...[truncated*]"
      }
    ]
  }
]

Source	Link
qualcomm	www.qualcomm.com/company/product-security/bulletins/august-2022-bulletin

21 Nov 2024 06:11Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.16.8 - 7.3

EPSS0.00032

CWE-347