NetSight
high7.5

CVE-2021-35078

Possible memory leak due to improper validation of certificate chain length while parsing server certificate chain in Snapdragon Auto, Snapdragon Compute, Snap…

Impact

Possible memory leak due to improper validation of certificate chain length while parsing server certificate chain in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Affected products

VendorProductAffected versions
QualcommAqt1000 Firmware
All versions
QualcommAr8035 Firmware
All versions
QualcommCsrb31024 Firmware
All versions
QualcommQca6174a Firmware
All versions
QualcommQca6390 Firmware
All versions
QualcommQca6391 Firmware
All versions
QualcommQca6420 Firmware
All versions
QualcommQca6421 Firmware
All versions
QualcommQca6426 Firmware
All versions
QualcommQca6430 Firmware
All versions
QualcommQca6431 Firmware
All versions
QualcommQca6436 Firmware
All versions

Weakness classification

References