CVE-2021-35089

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Possible buffer overflow due to lack of input IB amount validation while processing the user command in Snapdragon Auto

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-120

Affected software

No affected versions have been published.

Timeline

Published
Apr 1, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-35096.1A flaw was found in Red Hat Ceph Storage 4, in the Dashboard component. In response to CVE-2020-27839, the JWT token was moved from localStoCVE-2021-350907.8Possible hypervisor memory corruption due to TOC TOU race condition when updating address mappings in Snapdragon Auto, Snapdragon Compute, SCVE-2021-350917.8Possible out of bounds read due to improper typecasting while handling page fault for global memory in Snapdragon Connectivity, Snapdragon MCVE-2021-350926.7Processing DCB/AVB algorithm with an invalid queue index from IOCTL request could lead to arbitrary address modification in Snapdragon Auto,CVE-2021-350936.5Possible memory corruption in BT controller when it receives an oversized LMP packet over 2-DH1 link and leads to denial of service in BlueCCVE-2021-350947.8Improper verification of timeout-based authentication in identity credential can lead to invalid authorization in HLOS in Snapdragon Auto, SCVE-2021-350957.0Improper serialization of message queue client registration can lead to race condition allowing multiple gunyah message clients to register CVE-2021-350967.5Improper memory allocation during counter check DLM handling can lead to denial of service in Snapdragon Auto, Snapdragon Compute, SnapdragoCVE-2021-350976.8Possible authentication bypass due to improper order of signature verification and hashing in the signature verification call in Snapdragon CVE-2021-350986.7Improper validation of session id in PCM routing process can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon CoCVE-2021-35107.5Zephyr JSON decoder incorrectly decodes array of array. Zephyr versions >= >1.14.0, >= >2.5.0 contain Attempt to Access Child of a Non-strucCVE-2021-351007.5Possible buffer over read due to improper calculation of string length while parsing Id3 tag in Snapdragon Auto, Snapdragon Compute, Snapdra
CVE-2021-35089: High severity, CVSS 7.8 | Vulnix