CVE-2021-35077

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Possible use after free scenario in compute offloads to DSP while multiple calls spawn a dynamic process in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

No affected versions have been published.

Timeline

Published: Feb 11, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-350787.5Possible memory leak due to improper validation of certificate chain length while parsing server certificate chain in Snapdragon Auto, Snapd CVE-2021-350795.5Improper validation of permissions for third party application accessing Telephony service API can lead to information disclosure in Snapdra CVE-2021-35085.5A flaw was found in PDFResurrect in version 0.22b. There is an infinite loop in get_xref_linear_skipped() in pdf.c via a crafted PDF file.CVE-2021-350805.5Disabled SMMU from secure side while RPM is assigned a secure stream can lead to information disclosure in Snapdragon Industrial IOT, Snapdr CVE-2021-350819.8Possible buffer overflow due to improper validation of SSID length received from beacon or probe response during an IBSS session in Snapdrag CVE-2021-350828.1Improper integrity check can lead to race condition between tasks PDCP and RRC? right after a valid RRC security mode command packet has bee CVE-2021-350839.1Possible out of bound read due to improper validation of certificate chain in SSL or Internet key exchange in Snapdragon Auto, Snapdragon Co CVE-2021-350847.1Possible out of bound read due to lack of length check of data length for a DIAG event in Snapdragon Auto, Snapdragon Compute, Snapdragon Co CVE-2021-350857.1Possible buffer overflow due to lack of buffer length check during management frame Rx handling in Snapdragon Auto, Snapdragon Compute, Snap CVE-2021-350867.5Possible buffer over read due to improper validation of SIB type when processing a NR system Information message in Snapdragon Auto, Snapdra CVE-2021-350877.5Possible null pointer access due to improper validation of system information message to be processed in Snapdragon Industrial IOT, Snapdrag CVE-2021-350889.1Possible out of bound read due to improper validation of IE length during SSID IE parse when channel is DFS in Snapdragon Auto, Snapdragon C