NetSight
IP …
high7.3

CVE-2021-35113

Possible authentication bypass due to improper order of signature verification and hashing in the signature verification call in Snapdragon Auto, Snapdragon Co…

Impact

Possible authentication bypass due to improper order of signature verification and hashing in the signature verification call in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Affected products

VendorProductAffected versions
QualcommAqt1000 Firmware
All versions
QualcommCsrb31024 Firmware
All versions
QualcommQca6174a Firmware
All versions
QualcommQca6310 Firmware
All versions
QualcommQca6335 Firmware
All versions
QualcommQca6420 Firmware
All versions
QualcommQca6430 Firmware
All versions
QualcommQca6564au Firmware
All versions
QualcommQca6574au Firmware
All versions
QualcommQca6595au Firmware
All versions
QualcommQca6696 Firmware
All versions
QualcommQca9377 Firmware
All versions

Weakness classification

CWE-347

References