CVE-2021-35115

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Improper handling of multiple session supported by PVM backend can lead to use after free in Snapdragon Auto, Snapdragon Mobile

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

No affected versions have been published.

Timeline

Published
Apr 1, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-351167.1APK can load a crafted model into the CDSP which can lead to a compromise of CDSP and other APK`s data executing there in Snapdragon Auto, SCVE-2021-351179.1An Out of Bounds read may potentially occur while processing an IBSS beacon, in Snapdragon Auto, Snapdragon Compute, Snapdragon ConnectivityCVE-2021-351186.7An out-of-bounds write can occur due to an incorrect input check in the camera driver in Snapdragon Auto, Snapdragon Compute, Snapdragon ConCVE-2021-351195.5Potential out of Bounds read in FIPS event processing due to improper validation of the length from the firmware in Snapdragon Auto, SnapdraCVE-2021-35128.8Improper access control vulnerability in Buffalo broadband routers (BHR-4GRV firmware Ver.1.99 and prior, DWR-HP-G300NH firmware Ver.1.83 anCVE-2021-351206.7Improper handling between export and release functions on the same handle from client can lead to use after free in Snapdragon Compute, SnapCVE-2021-351216.7An array index is improperly used to lock and unlock a mutex which can lead to a Use After Free condition In the Synx driver in Snapdragon CCVE-2021-351227.8Non-secure region can try modifying RG permissions of IO space xPUs due to improper input validation in Snapdragon Auto, Snapdragon Compute,CVE-2021-351238.8Buffer copy in GATT multi notification due to improper length check for the data coming over-the-air in Snapdragon Connectivity, Snapdragon CVE-2021-351267.8Memory corruption in DSP service due to improper validation of input parameters in Snapdragon Auto, Snapdragon Compute, Snapdragon ConnectivCVE-2021-351297.8Memory corruption in BT controller due to improper length check while processing vendor specific commands in Snapdragon Compute, Snapdragon CVE-2021-35137.5A flaw was found in keycloak where a brute force attack is possible even when the permanent lockout feature is enabled. This is due to a wro
CVE-2021-35115: High severity, CVSS 7.8 | Vulnix