CVE-2021-35120: Double Free
Improper handling between export and release functions on the same handle from client can lead to use after free in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:linux_kernel:Qualcommto a version that resolves this vulnerability.Fixed in SoCVersion:2022-06-05
Event History
Frequently Asked Questions
What is the severity of CVE-2021-35120?
CVE-2021-35120 is rated as high severity due to its potential to cause use after free vulnerabilities in Qualcomm hardware.
How do I fix CVE-2021-35120?
To fix CVE-2021-35120, users should update their affected Qualcomm firmware to the latest version provided by Qualcomm.
Which Qualcomm devices are affected by CVE-2021-35120?
CVE-2021-35120 affects a variety of Qualcomm devices, including APQ8053, AQT1000, and others as listed in the official security bulletin.
What is the impact of CVE-2021-35120?
The impact of CVE-2021-35120 includes potential arbitrary code execution that can lead to system crashes or unauthorized access.
Is there a workaround for CVE-2021-35120?
There are no known effective workarounds for CVE-2021-35120, so updating the firmware is the recommended action.