CVE-2021-35105: Incorrect Type Cast
Possible out of bounds access due to improper input validation during graphics profiling in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:linux_kernel:Qualcommto a version that resolves this vulnerability.Fixed in SoCVersion:2022-03-05
Event History
Frequently Asked Questions
What is the severity of CVE-2021-35105?
The severity of CVE-2021-35105 is classified as High due to the potential for an out-of-bounds access that can impact system integrity.
How do I fix CVE-2021-35105?
To fix CVE-2021-35105, users should update the affected Snapdragon firmware to the latest version provided by their device manufacturer.
What devices are affected by CVE-2021-35105?
CVE-2021-35105 affects a wide range of Qualcomm Snapdragon devices, particularly those running specific firmware versions, including various models of the Snapdragon Auto, Compute, and Consumer IoT series.
What type of vulnerability is CVE-2021-35105?
CVE-2021-35105 is an out-of-bounds access vulnerability that arises from improper input validation during graphics profiling.
Can CVE-2021-35105 lead to remote code execution?
Yes, CVE-2021-35105 could potentially lead to remote code execution or system crashes if exploited.