CVE-2021-35111

MediumCVSS 5.9/10Last modified Jun 17, 2026

Description

Improper validation of tag id while RRC sending tag id to MAC can lead to TOCTOU race condition in Snapdragon Connectivity, Snapdragon Mobile

Metrics

CVSS 3.1 5.9/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-20 CWE-367

Affected software

Vendor	Product	Versions
Qualcomm, Inc.	Snapdragon Connectivity, Snapdragon Mobile	AR8035, QCA6390, QCA6391, QCA8081, QCA8337, SD 8 Gen1 5G, SD765, SD765G, SD768G, SD778G, SD865 5G, SD870, SD888 5G, SDX55, SDX55M, SDX65, SM7250P, SM7450, SM8475, SM8475P, WCD9341, WCD9370, WCD9375, WCD9380, WCD9385, WCN3991, WCN3998, WCN6750, WCN6850, WCN6851, WCN6855, WCN6856, WCN7851, WSA8810, WSA8815, WSA8830, WSA8832, WSA8835

References

https://www.qualcomm.com/company/product-security/bulletins/june-2022-bulletinVendor Advisory
https://www.qualcomm.com/company/product-security/bulletins/june-2022-bulletinVendor Advisory

Timeline

Published: Jun 14, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-351127.8A user with user level permission can access graphics protected region due to improper access control in register configuration in Snapdrago CVE-2021-351136.8Possible authentication bypass due to improper order of signature verification and hashing in the signature verification call in Snapdragon CVE-2021-351147.8Improper buffer initialization on the backend driver can lead to buffer overflow in Snapdragon Auto CVE-2021-351157.8Improper handling of multiple session supported by PVM backend can lead to use after free in Snapdragon Auto, Snapdragon Mobile CVE-2021-351167.1APK can load a crafted model into the CDSP which can lead to a compromise of CDSP and other APK`s data executing there in Snapdragon Auto, S CVE-2021-351179.1An Out of Bounds read may potentially occur while processing an IBSS beacon, in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity CVE-2021-351186.7An out-of-bounds write can occur due to an incorrect input check in the camera driver in Snapdragon Auto, Snapdragon Compute, Snapdragon Con CVE-2021-351195.5Potential out of Bounds read in FIPS event processing due to improper validation of the length from the firmware in Snapdragon Auto, Snapdra CVE-2021-35128.8Improper access control vulnerability in Buffalo broadband routers (BHR-4GRV firmware Ver.1.99 and prior, DWR-HP-G300NH firmware Ver.1.83 an CVE-2021-351206.7Improper handling between export and release functions on the same handle from client can lead to use after free in Snapdragon Compute, Snap CVE-2021-351216.7An array index is improperly used to lock and unlock a mutex which can lead to a Use After Free condition In the Synx driver in Snapdragon C CVE-2021-351227.8Non-secure region can try modifying RG permissions of IO space xPUs due to improper input validation in Snapdragon Auto, Snapdragon Compute,