CVE-2021-35119: Medium severity Qualcomm Aqt1000 Firmware vulnerability
Potential out of Bounds read in FIPS event processing due to improper validation of the length from the firmware in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/platform/vendor/qcom-opensource/wlan/qca-wifi-host-cmnto a version that resolves this vulnerability.Fixed in SoCVersion:2022-06-05
Event History
Frequently Asked Questions
What is the severity of CVE-2021-35119?
CVE-2021-35119 has a severity rating that indicates potential security risks, particularly an out of bounds read vulnerability.
What systems are affected by CVE-2021-35119?
CVE-2021-35119 impacts several Qualcomm products, including firmware for Snapdragon devices.
How do I fix CVE-2021-35119?
To remediate CVE-2021-35119, users should update their Qualcomm firmware to the latest version provided by the manufacturer.
What kind of vulnerability is CVE-2021-35119?
CVE-2021-35119 is identified as an out of bounds read vulnerability due to improper validation of firmware length.
Is there a workaround for CVE-2021-35119?
Currently, the recommended approach for CVE-2021-35119 is to apply the firmware updates as no specific workarounds have been publicly documented.