CVE-2021-35123: High severity Google Android vulnerability
Published Apr 4, 2022
·Updated
Buffer copy in GATT multi notification due to improper length check for the data coming over-the-air in Snapdragon Connectivity, Snapdragon Industrial IOT
Affected Software
65 affected components
Google Android
Qualcomm Aqt1000 Firmware
Qualcomm Aqt1000
Qualcomm Qca6390 Firmware
Qualcomm Qca6390
Qualcomm Qca6391 Firmware
Qualcomm Qca6391
Qualcomm Sd 8 Gen1 5g Firmware
Qualcomm Sm8475
Qualcomm Sd480 Firmware
Qualcomm Sd480
Qualcomm Sd660 Firmware
Qualcomm Sd660
Qualcomm Sd778g Firmware
Qualcomm Sd778g
Qualcomm Sd780g Firmware
Qualcomm Sd780g
Qualcomm Sd855 Firmware
Qualcomm Sd855
Qualcomm Sd865 5g Firmware
Qualcomm Sd865 5g
Qualcomm Sd870 Firmware
Qualcomm Sd870
Qualcomm Sd888 5g Firmware
Qualcomm Sd888 5g
Qualcomm Sdx55m Firmware
Qualcomm Sdx55m
Qualcomm Sm6375 Firmware
Qualcomm Sm6375
Qualcomm Sm7325p Firmware
Qualcomm Sm7325p
Qualcomm Wcd9335 Firmware
Qualcomm Wcd9335
Qualcomm Wcd9370 Firmware
Qualcomm Wcd9370
Qualcomm Wcd9375 Firmware
Qualcomm Wcd9375
Qualcomm Wcd9380 Firmware
Qualcomm Wcd9380
Qualcomm Wcd9385 Firmware
Qualcomm Wcd9385
Qualcomm Wcn3980 Firmware
Qualcomm Wcn3980
Qualcomm Wcn3988 Firmware
Qualcomm Wcn3988
Qualcomm Wcn3991 Firmware
Qualcomm Wcn3991
Qualcomm Wcn3998 Firmware
Qualcomm Wcn3998
Qualcomm Wcn6740 Firmware
Qualcomm Wcn6740
Qualcomm Wcn6750 Firmware
Qualcomm Wcn6750
Qualcomm Wcn6850 Firmware
Qualcomm Wcn6850
Qualcomm Wcn6851 Firmware
Qualcomm Wcn6851
Qualcomm Wcn6855 Firmware
Qualcomm WCN6855
Qualcomm Wcn6856 Firmware
Qualcomm Wcn6856
Qualcomm Wsa8830 Firmware
Qualcomm Wsa8830
Qualcomm Wsa8835 Firmware
Qualcomm Wsa8835
Remediation
Event History
Apr 4, 2022
CVE Published
via Android·12:00 AM
Data Sourced
via Android·12:00 AM
SeverityAffected Software
Jun 14, 2022
CVE Published
via MITRE·10:11 AM
Data Sourced
via MITRE·10:11 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2021-35123?
CVE-2021-35123 has been classified with a high severity rating due to the potential for remote code execution.
2
How do I fix CVE-2021-35123?
To fix CVE-2021-35123, apply the available patches and updates from the device manufacturers or Qualcomm support.
3
What devices are affected by CVE-2021-35123?
CVE-2021-35123 affects various Qualcomm firmware and Google Android devices that utilize Snapdragon connectivity.
4
What type of vulnerability is CVE-2021-35123?
CVE-2021-35123 is a buffer copy issue attributed to improper length checks for data received over-the-air.
5
Can exploiting CVE-2021-35123 lead to data exposure?
Yes, if exploited, CVE-2021-35123 could lead to unauthorized access and potential data exposure.