What is CVE-2021-35129?

CVE-2021-35129 is a high-severity vulnerability in Qualcomm Ar8035, classified under Buffer Copy without Checking Size of Input (Classic Buffer Overflow). CVSS score: 7.8/10. Published 2022-06-14.

How severe is CVE-2021-35129?

High severity. CVSS v3 base score is 7.8 out of 10.

Buffer overflow in Qualcomm Ar8035

CVE-2021-35129

Memory corruption in BT controller due to improper length check while processing vendor specific commands in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking

Vulnerability class: Buffer Overflow

EPSS: 0.002 (5.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Weakness classification (CWE)

CWE-120 — Buffer Copy without Checking Size of Input (Classic Buffer Overflow)

References

product-security@qualcomm.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2021-35129?: CVE-2021-35129 is a high-severity vulnerability in Qualcomm Ar8035, classified under Buffer Copy without Checking Size of Input (Classic Buffer Overflow). CVSS score: 7.8/10. Published 2022-06-14.
How severe is CVE-2021-35129?: High severity. CVSS v3 base score is 7.8 out of 10.