CVE-2021-35085: Buffer Overflow
Possible buffer overflow due to lack of buffer length check during management frame Rx handling in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/platform/vendor/qcom-opensource/wlan/qca-wifi-host-cmnto a version that resolves this vulnerability.Fixed in SoCVersion:2022-05-05
Event History
Frequently Asked Questions
What is the severity of CVE-2021-35085?
The severity of CVE-2021-35085 is classified as critical due to the potential for buffer overflow exploitation.
What are the affected products for CVE-2021-35085?
CVE-2021-35085 affects various Qualcomm products, including multiple firmware versions for Snapdragon Auto, Compute, Connectivity, Industrial IoT, and Mobile devices.
How do I fix CVE-2021-35085?
To fix CVE-2021-35085, it is recommended to update to the latest firmware version provided by Qualcomm that addresses this vulnerability.
What are the potential impacts of CVE-2021-35085?
The potential impacts of CVE-2021-35085 include remote code execution and unauthorized access to device functionalities.
Is there a workaround for CVE-2021-35085?
Currently, there are no known effective workarounds for CVE-2021-35085; applying the firmware update is the recommended course of action.