CVE-2021-35082

HighCVSS 8.1/10Last modified Jun 17, 2026

Description

Improper integrity check can lead to race condition between tasks PDCP and RRC? right after a valid RRC security mode command packet has been received in Snapdragon Industrial IOT

Metrics

CVSS 3.1 8.1/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-367

Affected software

Vendor	Product	Versions
Qualcomm, Inc.	Snapdragon Industrial IOT	MDM9206, QCA9367, QCA9377

References

https://www.qualcomm.com/company/product-security/bulletins/may-2022-bulletinVendor Advisory
https://www.qualcomm.com/company/product-security/bulletins/may-2022-bulletinVendor Advisory

Timeline

Published: Jun 14, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-350839.1Possible out of bound read due to improper validation of certificate chain in SSL or Internet key exchange in Snapdragon Auto, Snapdragon Co CVE-2021-350847.1Possible out of bound read due to lack of length check of data length for a DIAG event in Snapdragon Auto, Snapdragon Compute, Snapdragon Co CVE-2021-350857.1Possible buffer overflow due to lack of buffer length check during management frame Rx handling in Snapdragon Auto, Snapdragon Compute, Snap CVE-2021-350867.5Possible buffer over read due to improper validation of SIB type when processing a NR system Information message in Snapdragon Auto, Snapdra CVE-2021-350877.5Possible null pointer access due to improper validation of system information message to be processed in Snapdragon Industrial IOT, Snapdrag CVE-2021-350889.1Possible out of bound read due to improper validation of IE length during SSID IE parse when channel is DFS in Snapdragon Auto, Snapdragon C CVE-2021-350897.8Possible buffer overflow due to lack of input IB amount validation while processing the user command in Snapdragon Auto CVE-2021-35096.1A flaw was found in Red Hat Ceph Storage 4, in the Dashboard component. In response to CVE-2020-27839, the JWT token was moved from localSto CVE-2021-350907.8Possible hypervisor memory corruption due to TOC TOU race condition when updating address mappings in Snapdragon Auto, Snapdragon Compute, S CVE-2021-350917.8Possible out of bounds read due to improper typecasting while handling page fault for global memory in Snapdragon Connectivity, Snapdragon M CVE-2021-350926.7Processing DCB/AVB algorithm with an invalid queue index from IOCTL request could lead to arbitrary address modification in Snapdragon Auto,CVE-2021-350936.5Possible memory corruption in BT controller when it receives an oversized LMP packet over 2-DH1 link and leads to denial of service in BlueC