NetSight
medium6.2

CVE-2021-35079

Improper validation of permissions for third party application accessing Telephony service API can lead to information disclosure in Snapdragon Compute, Snapdr…

Impact

Improper validation of permissions for third party application accessing Telephony service API can lead to information disclosure in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

Affected products

VendorProductAffected versions
QualcommApq8053 Firmware
All versions
QualcommAqt1000 Firmware
All versions
QualcommMsm8953 Firmware
All versions
QualcommQca6390 Firmware
All versions
QualcommQca6391 Firmware
All versions
QualcommQca6420 Firmware
All versions
QualcommQca6426 Firmware
All versions
QualcommQca6430 Firmware
All versions
QualcommQca6436 Firmware
All versions
QualcommQcm4290 Firmware
All versions
QualcommQcs4290 Firmware
All versions
QualcommQcs603 Firmware
All versions

Weakness classification

References