Lucene search

[email protected]CVE-2021-35116

HistoryJun 14, 2022 - 10:15 a.m.

CVE-2021-35116

2022-06-1410:15:00

CWE-20

[email protected]

web.nvd.nist.gov

cve-2021-35116

apk

cdsp

snapdragon

compromise

data execution

nvd

7.1 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

6.9 Medium

AI Score

Confidence

High

6.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:C/I:C/A:N

0.0004 Low

EPSS

Percentile

11.7%

JSON

APK can load a crafted model into the CDSP which can lead to a compromise of CDSP and other APK`s data executing there in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

CPENameOperatorVersion
qualcomm:apq8009_firmwarequalcomm apq8009 firmwareeq-
qualcomm:apq8009w_firmwarequalcomm apq8009w firmwareeq-
qualcomm:apq8096au_firmwarequalcomm apq8096au firmwareeq-
qualcomm:aqt1000_firmwarequalcomm aqt1000 firmwareeq-
qualcomm:csrb31024_firmwarequalcomm csrb31024 firmwareeq-
qualcomm:mdm9607_firmwarequalcomm mdm9607 firmwareeq-
qualcomm:mdm9626_firmwarequalcomm mdm9626 firmwareeq-
qualcomm:mdm9628_firmwarequalcomm mdm9628 firmwareeq-
qualcomm:mdm9640_firmwarequalcomm mdm9640 firmwareeq-
qualcomm:msm8909w_firmwarequalcomm msm8909w firmwareeq-

CPE	Name	Operator	Version
qualcomm:apq8009_firmware	qualcomm apq8009 firmware	eq	-
qualcomm:apq8009w_firmware	qualcomm apq8009w firmware	eq	-
qualcomm:apq8096au_firmware	qualcomm apq8096au firmware	eq	-
qualcomm:aqt1000_firmware	qualcomm aqt1000 firmware	eq	-
qualcomm:csrb31024_firmware	qualcomm csrb31024 firmware	eq	-
qualcomm:mdm9607_firmware	qualcomm mdm9607 firmware	eq	-
qualcomm:mdm9626_firmware	qualcomm mdm9626 firmware	eq	-
qualcomm:mdm9628_firmware	qualcomm mdm9628 firmware	eq	-
qualcomm:mdm9640_firmware	qualcomm mdm9640 firmware	eq	-
qualcomm:msm8909w_firmware	qualcomm msm8909w firmware	eq	-

Rows per page:

1-10 of 1131

References

www.qualcomm.com/company/product-security/bulletins/may-2022-bulletin

Social References

7.1 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

6.9 Medium

AI Score

Confidence

High

6.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:C/I:C/A:N

0.0004 Low

EPSS

Percentile

11.7%

JSON

Related for CVE-2021-35116

prion1 androidsecurity1