Lucene search

[email protected]CVE-2021-35111

HistoryJun 14, 2022 - 10:15 a.m.

CVE-2021-35111

2022-06-1410:15:00

CWE-367

CWE-20

[email protected]

web.nvd.nist.gov

cve-2021-35111

toctou

race condition

snapdragon

connectivity

mobile

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

5.9 Medium

AI Score

Confidence

High

7.1 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

0.001 Low

EPSS

Percentile

37.4%

JSON

Improper validation of tag id while RRC sending tag id to MAC can lead to TOCTOU race condition in Snapdragon Connectivity, Snapdragon Mobile

CPENameOperatorVersion
qualcomm:ar8035_firmwarequalcomm ar8035 firmwareeq-
qualcomm:qca6390_firmwarequalcomm qca6390 firmwareeq-
qualcomm:qca6391_firmwarequalcomm qca6391 firmwareeq-
qualcomm:qca8081_firmwarequalcomm qca8081 firmwareeq-
qualcomm:qca8337_firmwarequalcomm qca8337 firmwareeq-
qualcomm:sd_8_gen1_5g_firmwarequalcomm sd 8 gen1 5g firmwareeq-
qualcomm:sd765_firmwarequalcomm sd765 firmwareeq-
qualcomm:sd765g_firmwarequalcomm sd765g firmwareeq-
qualcomm:sd768g_firmwarequalcomm sd768g firmwareeq-
qualcomm:sd778g_firmwarequalcomm sd778g firmwareeq-

CPE	Name	Operator	Version
qualcomm:ar8035_firmware	qualcomm ar8035 firmware	eq	-
qualcomm:qca6390_firmware	qualcomm qca6390 firmware	eq	-
qualcomm:qca6391_firmware	qualcomm qca6391 firmware	eq	-
qualcomm:qca8081_firmware	qualcomm qca8081 firmware	eq	-
qualcomm:qca8337_firmware	qualcomm qca8337 firmware	eq	-
qualcomm:sd_8_gen1_5g_firmware	qualcomm sd 8 gen1 5g firmware	eq	-
qualcomm:sd765_firmware	qualcomm sd765 firmware	eq	-
qualcomm:sd765g_firmware	qualcomm sd765g firmware	eq	-
qualcomm:sd768g_firmware	qualcomm sd768g firmware	eq	-
qualcomm:sd778g_firmware	qualcomm sd778g firmware	eq	-

Rows per page:

1-10 of 381

References

www.qualcomm.com/company/product-security/bulletins/june-2022-bulletin

Social References

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

5.9 Medium

AI Score

Confidence

High

7.1 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

0.001 Low

EPSS

Percentile

37.4%

JSON

Related for CVE-2021-35111

prion1