What is the severity of CVE-2021-35092?

The severity of CVE-2021-35092 is classified as high due to the potential for arbitrary address modification.

How do I fix CVE-2021-35092?

To fix CVE-2021-35092, update the Qualcomm firmware to the latest version that addresses the vulnerability.

What devices are affected by CVE-2021-35092?

CVE-2021-35092 affects various Qualcomm Snapdragon firmware, including multiple models within the Snapdragon Auto, Compute, and Consumer IoT categories.

What type of vulnerability is CVE-2021-35092?

CVE-2021-35092 is a vulnerability that arises from improper handling of invalid queue indices in IOCTL requests.

What damage could result from exploiting CVE-2021-35092?

Exploiting CVE-2021-35092 could allow an attacker to modify arbitrary memory addresses, potentially leading to device malfunction or unauthorized access.

Vulnerability/
CVE-2021-35092

medium

6.7

CWE

14/6/2022

4/8/2024

CVE-2021-35092: Input Validation

First published: Tue Jun 14 2022(Updated: )

Processing DCB/AVB algorithm with an invalid queue index from IOCTL request could lead to arbitrary address modification in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

Credit: product-security@qualcomm.com

Affected Software	Affected Version	How to fix
qualcomm apq8053-ac firmware
Qualcomm APQ8053 Firmware
Qualcomm APQ8096AU Firmware
Qualcomm APQ8096AU Firmware
Qualcomm AQT1000 Firmware
Qualcomm AQT1000 Firmware
Qualcomm AR8031
Qualcomm AR8031 Firmware
Qualcomm AR8035 Firmware
Qualcomm AR8035 Firmware
Qualcomm CSRA6620
Qualcomm CSRA6620
Qualcomm csra6640 firmware
Qualcomm csra6640 firmware
Qualcomm MDM9150 firmware
Qualcomm MDM9150 firmware
Qualcomm MDM9650
Qualcomm MDM9650 firmware
Qualcomm 8953 Firmware
Qualcomm MSM8953 Firmware
Qualcomm QCA6174A Firmware
Qualcomm QCA6174A Firmware
Qualcomm QCA6390 Firmware
Qualcomm QCA6390 Firmware
Qualcomm QCA6391 Firmware
Qualcomm QCA6391 Firmware
Qualcomm QCA6420 Firmware
Qualcomm QCA6420 Firmware
Qualcomm QCA6430 firmware
Qualcomm QCA6430 firmware
qualcomm qca6574a firmware
qualcomm qca6574a firmware
Qualcomm QCA6574 Firmware
Qualcomm QCA6574AU
Qualcomm QCA6595AU Firmware
Qualcomm QCA6595AU Firmware
Qualcomm QCA6696 Firmware
Qualcomm QCA6696 Firmware
Qualcomm QCA8081 firmware
Qualcomm QCA8081 firmware
Qualcomm QCA8337 Firmware
Qualcomm QCA8337 Firmware
Qualcomm QCA9377 Firmware
Qualcomm QCA9377 Firmware
Qualcomm QCS405 Firmware
Qualcomm QCS405 Firmware
Qualcomm QCS410 Firmware
Qualcomm QCS410 Firmware
Qualcomm ZZ QCS605 firmware
Qualcomm QCS605 Firmware
Qualcomm QCS610 Firmware
Qualcomm QCS610 Firmware
Qualcomm QRB5165 Firmware
Qualcomm QRB5165 Firmware
Qualcomm QRB5165M Firmware
Qualcomm QRB5165M Firmware
Qualcomm QRB5165 Firmware
qualcomm qrb5165n firmware
Qualcomm 215 Mobile Firmware
Qualcomm 215 Firmware
Qualcomm Snapdragon 8 Gen 1 Firmware
Qualcomm SM8475P
Qualcomm SD460 Firmware
Qualcomm SD460 Firmware
Qualcomm SD 480 Firmware
Qualcomm Snapdragon 480
Qualcomm SD662 Firmware
Qualcomm SD662 Firmware
Qualcomm SD680 Firmware
Qualcomm SD680 Firmware
Qualcomm Snapdragon 690 5G Firmware
Qualcomm Snapdragon 690 5G Firmware
Qualcomm SD695 Firmware
Qualcomm Snapdragon 695
Qualcomm SD750G Firmware
Qualcomm Snapdragon 750G
Qualcomm SD765 Firmware
Qualcomm Snapdragon 765
Qualcomm SD765 Firmware
Qualcomm Snapdragon 765G
Qualcomm SD768G Firmware
Qualcomm SD768G Firmware
Qualcomm SD778G Firmware
Qualcomm SD778G
Qualcomm Snapdragon 780G Firmware
Qualcomm Snapdragon 780G
Qualcomm Snapdragon 855
Qualcomm Snapdragon 855
Qualcomm Snapdragon 865 5G Firmware
Qualcomm Snapdragon 865 5G Firmware
Qualcomm SD870
Qualcomm SD870 Firmware
Qualcomm Snapdragon 888 5G Firmware
Qualcomm Snapdragon 888 5G
Qualcomm SD 12 Firmware
Qualcomm SDX12
Qualcomm SDX55M Firmware
Qualcomm SDX55 Firmware
Qualcomm SDX55M Firmware
Qualcomm SDX55M Firmware
Qualcomm SDX65
Qualcomm SDX65M
Qualcomm SM7250 Firmware
Qualcomm SM7250
Qualcomm SM7325P Firmware
Qualcomm SM7325P Firmware
Qualcomm WCD9326
Qualcomm WCD9326 Firmware
Qualcomm WCD9335 Firmware
Qualcomm WCD9335 Firmware
Qualcomm WCD9341
Qualcomm WCD9341 Firmware
Qualcomm WCD9360 Firmware
Qualcomm WCD9360 Firmware
Qualcomm WCD9370 Firmware
Qualcomm WCD9370 Firmware
Qualcomm WCD9375
Qualcomm WCD9375 Firmware
Qualcomm WCD9380
Qualcomm WCD9380 Firmware
Qualcomm WCD9385
Qualcomm WCD9385 Firmware
Qualcomm WCN3615 Firmware
Qualcomm WCN3615 Firmware
Qualcomm WCN3660B
Qualcomm WCN3660B Firmware
Qualcomm WCN3680B Firmware
Qualcomm WCN3680B Firmware
Qualcomm WCN3680B Firmware
Qualcomm WCN3680B Firmware
Qualcomm WCN3950 Firmware
Qualcomm WCN3950 Firmware
Qualcomm Wcn3980
qualcomm wcn3980 firmware
qualcomm wcn3988 firmware
Qualcomm WCN3988
Qualcomm WCN3990
Qualcomm WCN3990
Qualcomm WCN3991 Firmware
Qualcomm WCN3991 Firmware
Qualcomm wcn3998 firmware
Qualcomm wcn3998 firmware
Qualcomm WCN6740 Firmware
Qualcomm WCN6740 Firmware
qualcomm wcn6750 firmware
qualcomm wcn6750 firmware
Qualcomm WCN6850 Firmware
Qualcomm WCN6850 Firmware
Qualcomm WCN6851 Firmware
Qualcomm WCN6851 Firmware
Qualcomm WCN6855 Firmware
Qualcomm WCN6855 Firmware
Qualcomm WCN6856 Firmware
Qualcomm WCN6856
Qualcomm WCN7850 Firmware
Qualcomm WCN7850 Firmware
Qualcomm WCN7851
Qualcomm WCN7851 Firmware
Qualcomm WSA8810
Qualcomm WSA8810 Firmware
qualcomm wsa8815 firmware
qualcomm wsa8815 firmware
Qualcomm WSA8830
Qualcomm WSA8830
Qualcomm WSA8835
Qualcomm WSA8835 Firmware

Remedy

https://www.qualcomm.com/company/product-security/bulletins/may-2022-bulletin

Never miss a vulnerability like this again

Reference Links

https://www.qualcomm.com/company/product-security/bulletins/may-2022-bulletin

Frequently Asked Questions

What is the severity of CVE-2021-35092?
The severity of CVE-2021-35092 is classified as high due to the potential for arbitrary address modification.
How do I fix CVE-2021-35092?
To fix CVE-2021-35092, update the Qualcomm firmware to the latest version that addresses the vulnerability.
What devices are affected by CVE-2021-35092?
CVE-2021-35092 affects various Qualcomm Snapdragon firmware, including multiple models within the Snapdragon Auto, Compute, and Consumer IoT categories.
What type of vulnerability is CVE-2021-35092?
CVE-2021-35092 is a vulnerability that arises from improper handling of invalid queue indices in IOCTL requests.
What damage could result from exploiting CVE-2021-35092?
Exploiting CVE-2021-35092 could allow an attacker to modify arbitrary memory addresses, potentially leading to device malfunction or unauthorized access.