Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2021-35095

Improper serialization of message queue client registration can lead to race condition allowing multiple gunyah message clients to register with same label in Snapdragon Connectivity, Snapdragon Mobile

Published

2022-06-14T10:15:16.670

Last Modified

2024-11-21T06:11:52.717

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 8.4 (HIGH)

CVSSv2 Vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

  • Access Vector: LOCAL
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

3.4

Impact Score

10.0

Weaknesses
  • Type: Primary
    CWE-502
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System qualcomm ar8035_firmware - Yes
Hardware qualcomm ar8035 - No
Operating System qualcomm qca8081_firmware - Yes
Hardware qualcomm qca8081 - No
Operating System qualcomm qca8337_firmware - Yes
Hardware qualcomm qca8337 - No
Operating System qualcomm sd_8_gen1_5g_firmware - Yes
Hardware qualcomm sm8475 - No
Operating System qualcomm sdx65_firmware - Yes
Hardware qualcomm sdx65 - No
Operating System qualcomm wcd9380_firmware - Yes
Hardware qualcomm wcd9380 - No
Operating System qualcomm wcn6855_firmware - Yes
Hardware qualcomm wcn6855 - No
Operating System qualcomm wcn6856_firmware - Yes
Hardware qualcomm wcn6856 - No
Operating System qualcomm wsa8830_firmware - Yes
Hardware qualcomm wsa8830 - No
Operating System qualcomm wsa8835_firmware - Yes
Hardware qualcomm wsa8835 - No
References