First published: Fri Sep 02 2022(Updated: )
Improper checking of AP-S lock bit while verifying the secure resource group permissions can lead to non secure read and write access in Snapdragon Connectivity, Snapdragon Mobile
Credit: product-security@qualcomm.com
Affected Software | Affected Version | How to fix |
---|---|---|
Google Android | ||
Qualcomm Sm8475 | ||
Qualcomm Sm7450 Firmware | ||
Qualcomm Sm7450 | ||
Qualcomm Sm8475 Firmware | ||
Qualcomm Sm8475p Firmware | ||
Qualcomm Sm8475p | ||
Qualcomm Wcd9370 Firmware | ||
Google Android | ||
Google Android | ||
Google Android | ||
Google Android | ||
Google Android | ||
Google Android | ||
Google Android | ||
Google Android | ||
Google Android | ||
Qualcomm Wcn6855 Firmware | ||
Google Android | ||
Google Android | ||
Google Android | ||
Google Android | ||
Qualcomm Wcn7851 | ||
Google Android | ||
Google Android | ||
Qualcomm Wsa8832 Firmware | ||
Qualcomm Wsa8832 | ||
Google Android | ||
Google Android | ||
Google Android |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2021-35108 is a vulnerability that occurs due to improper checking of AP-S lock bit while verifying the secure resource group permissions, which can lead to non-secure read and write access in Snapdragon Connectivity and Snapdragon Mobile.
CVE-2021-35108 affects the affected software by allowing non-secure read and write access in Snapdragon Connectivity and Snapdragon Mobile.
The severity of CVE-2021-35108 is high, with a severity value of 6.8.
To fix CVE-2021-35108, apply the necessary patches and updates provided by Qualcomm and follow the recommendations provided in the official bulletins.
You can find more information about CVE-2021-35108 in the official bulletins provided by Qualcomm and the Android Security Bulletin.