CVE-2021-35123

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Buffer copy in GATT multi notification due to improper length check for the data coming over-the-air in Snapdragon Connectivity, Snapdragon Industrial IOT

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published: Jun 14, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-351267.8Memory corruption in DSP service due to improper validation of input parameters in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectiv CVE-2021-351297.8Memory corruption in BT controller due to improper length check while processing vendor specific commands in Snapdragon Compute, Snapdragon CVE-2021-35137.5A flaw was found in keycloak where a brute force attack is possible even when the permanent lockout feature is enabled. This is due to a wro CVE-2021-351307.8Memory corruption in graphics support layer due to use after free condition in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industri CVE-2021-351327.8Out of bound write in DSP service due to improper bound check for response buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Co CVE-2021-351336.7Use after free in the synx driver issue while performing other functions during multiple invocation of synx release calls in Snapdragon Conn CVE-2021-351348.4Due to insufficient validation of ELF headers, an Incorrect Calculation of Buffer Size can occur in Boot leading to memory corruption in Sna CVE-2021-351355.5A null pointer dereference may potentially occur during RSA key import in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snap CVE-2021-35146.5When using a sync_repl client in 389-ds-base, an authenticated attacker can cause a NULL pointer dereference using a specially crafted query CVE-2021-35156.7A shell injection flaw was found in pglogical in versions before 2.3.4 and before 3.6.26. An attacker with CREATEDB privileges on a PostgreS CVE-2021-35167.8There's a flaw in libxml2's xmllint in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by xmllint c CVE-2021-35178.6There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11. An attacker who is able to supply a crafted f