What is CVE-2021-35079?

CVE-2021-35079 is a medium-severity vulnerability in Qualcomm Apq8053, classified under Improper Preservation of Permissions. CVSS score: 6.2/10. Published 2022-06-14.

How severe is CVE-2021-35079?

Medium severity. CVSS v3 base score is 6.2 out of 10.

Vulnerability in Qualcomm Apq8053

CVE-2021-35079

Improper validation of permissions for third party application accessing Telephony service API can lead to information disclosure in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

EPSS: 0.001 (2.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.2 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Qualcomm Apq8053
Qualcomm Apq8053_firmware
Qualcomm Aqt1000
Qualcomm Aqt1000_firmware
Qualcomm Msm8953
Qualcomm Msm8953_firmware
Qualcomm Qca6390
Qualcomm Qca6390_firmware
Qualcomm Qca6391
Qualcomm Qca6391_firmware

Weakness classification (CWE)

CWE-281 — Improper Preservation of Permissions

References

product-security@qualcomm.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2021-35079?: CVE-2021-35079 is a medium-severity vulnerability in Qualcomm Apq8053, classified under Improper Preservation of Permissions. CVSS score: 6.2/10. Published 2022-06-14.
How severe is CVE-2021-35079?: Medium severity. CVSS v3 base score is 6.2 out of 10.