CVE-2021-35123: High severity Qualcomm Aqt1000 Firmware vulnerability
Buffer copy in GATT multi notification due to improper length check for the data coming over-the-air in Snapdragon Connectivity, Snapdragon Industrial IOT
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/platform/vendor/qcom-opensource/system/btto a version that resolves this vulnerability.Fixed in SoCVersion:2022-04-05
Event History
Frequently Asked Questions
What is the severity of CVE-2021-35123?
CVE-2021-35123 has been classified with a high severity rating due to the potential for remote code execution.
How do I fix CVE-2021-35123?
To fix CVE-2021-35123, apply the available patches and updates from the device manufacturers or Qualcomm support.
What devices are affected by CVE-2021-35123?
CVE-2021-35123 affects various Qualcomm firmware and Google Android devices that utilize Snapdragon connectivity.
What type of vulnerability is CVE-2021-35123?
CVE-2021-35123 is a buffer copy issue attributed to improper length checks for data received over-the-air.
Can exploiting CVE-2021-35123 lead to data exposure?
Yes, if exploited, CVE-2021-35123 could lead to unauthorized access and potential data exposure.