CVE-2021-35070

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

RPM secure Stream can access any secure resource due to improper SMMU configuration and can lead to information disclosure in Snapdragon Industrial IOT, Snapdragon Mobile

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-200

Affected software

Vendor	Product	Versions
Qualcomm, Inc.	Snapdragon Industrial IOT, Snapdragon Mobile	QCM6125, QCS6125, SD665, WCD9370, WCD9375, WCN3950, WCN3980, WSA8810, WSA8815

References

https://www.qualcomm.com/company/product-security/bulletins/april-2022-bulletinVendor Advisory
https://www.qualcomm.com/company/product-security/bulletins/april-2022-bulletinVendor Advisory

Timeline

Published: Jun 14, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-350715.5Possible buffer over read due to lack of size validation while copying data from DBR buffer to RX buffer and can lead to Denial of Service i CVE-2021-350727.8Possible buffer overflow due to improper validation of array index while processing external DIAG command in Snapdragon Auto, Snapdragon Con CVE-2021-350737.5Possible assertion due to improper validation of rank restriction field in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Sna CVE-2021-350747.8Possible integer overflow due to improper fragment datatype while calculating number of fragments in a request message in Snapdragon Auto, S CVE-2021-350757.8Possible null pointer dereference due to lack of WDOG structure validation during registration in Snapdragon Auto, Snapdragon Connectivity, CVE-2021-350767.5Possible null pointer dereference due to improper validation of RRC connection reconfiguration message in Snapdragon Auto, Snapdragon Comput CVE-2021-350777.8Possible use after free scenario in compute offloads to DSP while multiple calls spawn a dynamic process in Snapdragon Auto, Snapdragon Comp CVE-2021-350787.5Possible memory leak due to improper validation of certificate chain length while parsing server certificate chain in Snapdragon Auto, Snapd CVE-2021-350795.5Improper validation of permissions for third party application accessing Telephony service API can lead to information disclosure in Snapdra CVE-2021-35085.5A flaw was found in PDFResurrect in version 0.22b. There is an infinite loop in get_xref_linear_skipped() in pdf.c via a crafted PDF file.CVE-2021-350805.5Disabled SMMU from secure side while RPM is assigned a secure stream can lead to information disclosure in Snapdragon Industrial IOT, Snapdr CVE-2021-350819.8Possible buffer overflow due to improper validation of SSID length received from beacon or probe response during an IBSS session in Snapdrag