What is CVE-2021-35134?

CVE-2021-35134 is a high-severity vulnerability in Qualcomm Qca6391, classified under Incorrect Calculation of Buffer Size. CVSS score: 8.4/10. Published 2022-09-02.

How severe is CVE-2021-35134?

High severity. CVSS v3 base score is 8.4 out of 10.

Vulnerability in Qualcomm Qca6391

CVE-2021-35134

Due to insufficient validation of ELF headers, an Incorrect Calculation of Buffer Size can occur in Boot leading to memory corruption in Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

EPSS: 0.001 (2.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.4 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Qualcomm Qca6391
Qualcomm Qca6391_firmware
Qualcomm Qcm6490
Qualcomm Qcm6490_firmware
Qualcomm Qcs6490
Qualcomm Qcs6490_firmware
Qualcomm Qsm8350
Qualcomm Qsm8350_firmware
Qualcomm Sd778g
Qualcomm Sd778g_firmware

Weakness classification (CWE)

CWE-131 — Incorrect Calculation of Buffer Size

References

product-security@qualcomm.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2021-35134?: CVE-2021-35134 is a high-severity vulnerability in Qualcomm Qca6391, classified under Incorrect Calculation of Buffer Size. CVSS score: 8.4/10. Published 2022-09-02.
How severe is CVE-2021-35134?: High severity. CVSS v3 base score is 8.4 out of 10.