CVE-2021-35104

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Possible buffer overflow due to improper parsing of headers while playing the FLAC audio clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-120

Affected software

No affected versions have been published.

Timeline

Published: Jun 14, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-351057.8Possible out of bounds access due to improper input validation during graphics profiling in Snapdragon Auto, Snapdragon Compute, Snapdragon CVE-2021-351067.8Possible out of bound read due to improper length calculation of WMI message. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivit CVE-2021-351086.8Improper checking of AP-S lock bit while verifying the secure resource group permissions can lead to non secure read and write access in Sna CVE-2021-351096.8Possible address manipulation from APP-NS while APP-S is configuring an RG where it tries to merge the address ranges in Snapdragon Connecti CVE-2021-35114.3Disclosure of sensitive information to an unauthorized user vulnerability in Buffalo broadband routers (BHR-4GRV firmware Ver.1.99 and prior CVE-2021-351108.8Possible buffer overflow to improper validation of hash segment of file while allocating memory in Snapdragon Connectivity, Snapdragon Mobil CVE-2021-351115.9Improper validation of tag id while RRC sending tag id to MAC can lead to TOCTOU race condition in Snapdragon Connectivity, Snapdragon Mobil CVE-2021-351127.8A user with user level permission can access graphics protected region due to improper access control in register configuration in Snapdrago CVE-2021-351136.8Possible authentication bypass due to improper order of signature verification and hashing in the signature verification call in Snapdragon CVE-2021-351147.8Improper buffer initialization on the backend driver can lead to buffer overflow in Snapdragon Auto CVE-2021-351157.8Improper handling of multiple session supported by PVM backend can lead to use after free in Snapdragon Auto, Snapdragon Mobile CVE-2021-351167.1APK can load a crafted model into the CDSP which can lead to a compromise of CDSP and other APK`s data executing there in Snapdragon Auto, S