CVE-2021-35086

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Possible buffer over read due to improper validation of SIB type when processing a NR system Information message in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-125

Affected software

No affected versions have been published.

Timeline

Published: Jun 14, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-350877.5Possible null pointer access due to improper validation of system information message to be processed in Snapdragon Industrial IOT, Snapdrag CVE-2021-350889.1Possible out of bound read due to improper validation of IE length during SSID IE parse when channel is DFS in Snapdragon Auto, Snapdragon C CVE-2021-350897.8Possible buffer overflow due to lack of input IB amount validation while processing the user command in Snapdragon Auto CVE-2021-35096.1A flaw was found in Red Hat Ceph Storage 4, in the Dashboard component. In response to CVE-2020-27839, the JWT token was moved from localSto CVE-2021-350907.8Possible hypervisor memory corruption due to TOC TOU race condition when updating address mappings in Snapdragon Auto, Snapdragon Compute, S CVE-2021-350917.8Possible out of bounds read due to improper typecasting while handling page fault for global memory in Snapdragon Connectivity, Snapdragon M CVE-2021-350926.7Processing DCB/AVB algorithm with an invalid queue index from IOCTL request could lead to arbitrary address modification in Snapdragon Auto,CVE-2021-350936.5Possible memory corruption in BT controller when it receives an oversized LMP packet over 2-DH1 link and leads to denial of service in BlueC CVE-2021-350947.8Improper verification of timeout-based authentication in identity credential can lead to invalid authorization in HLOS in Snapdragon Auto, S CVE-2021-350957.0Improper serialization of message queue client registration can lead to race condition allowing multiple gunyah message clients to register CVE-2021-350967.5Improper memory allocation during counter check DLM handling can lead to denial of service in Snapdragon Auto, Snapdragon Compute, Snapdrago CVE-2021-350976.8Possible authentication bypass due to improper order of signature verification and hashing in the signature verification call in Snapdragon