NetSight
high7.7

CVE-2021-35116

APK can load a crafted model into the CDSP which can lead to a compromise of CDSP and other APK`s data executing there in Snapdragon Auto, Snapdragon Compute, …

Impact

APK can load a crafted model into the CDSP which can lead to a compromise of CDSP and other APK`s data executing there in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Affected products

VendorProductAffected versions
QualcommApq8009 Firmware
All versions
QualcommApq8009w Firmware
All versions
QualcommApq8096au Firmware
All versions
QualcommAqt1000 Firmware
All versions
QualcommCsrb31024 Firmware
All versions
QualcommMdm9607 Firmware
All versions
QualcommMdm9626 Firmware
All versions
QualcommMdm9628 Firmware
All versions
QualcommMdm9640 Firmware
All versions
QualcommMsm8909w Firmware
All versions
QualcommMsm8937 Firmware
All versions
QualcommMsm8996au Firmware
All versions

Weakness classification

References