NetSight
high8.2

CVE-2021-35088

Possible out of bound read due to improper validation of IE length during SSID IE parse when channel is DFS in Snapdragon Auto, Snapdragon Compute, Snapdragon …

Impact

Possible out of bound read due to improper validation of IE length during SSID IE parse when channel is DFS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Affected products

VendorProductAffected versions
QualcommAqt1000 Firmware
All versions
QualcommAr8035 Firmware
All versions
QualcommAr9380 Firmware
All versions
QualcommCsr8811 Firmware
All versions
QualcommCsrb31024 Firmware
All versions
QualcommFsm10055 Firmware
All versions
QualcommFsm10056 Firmware
All versions
QualcommIpq4018 Firmware
All versions
QualcommIpq4019 Firmware
All versions
QualcommIpq4028 Firmware
All versions
QualcommIpq4029 Firmware
All versions
QualcommIpq5010 Firmware
All versions

Weakness classification

References