NetSight
medium5.5

CVE-2021-35084

Possible out of bound read due to lack of length check of data length for a DIAG event in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdra…

Impact

Possible out of bound read due to lack of length check of data length for a DIAG event in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

Affected products

VendorProductAffected versions
QualcommAqt1000 Firmware
All versions
QualcommAr8031 Firmware
All versions
QualcommAr8035 Firmware
All versions
QualcommCsra6620 Firmware
All versions
QualcommCsra6640 Firmware
All versions
QualcommCsrb31024 Firmware
All versions
QualcommQca6174a Firmware
All versions
QualcommQca6175a Firmware
All versions
QualcommQca6390 Firmware
All versions
QualcommQca6391 Firmware
All versions
QualcommQca6420 Firmware
All versions
QualcommQca6426 Firmware
All versions

Weakness classification

References