CVSS 3.1
7.8 highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCVE-2021-35072
High (7.8) in qualcomm. EPSS 0.2% chance of exploitation in the next 30 days.
Possible buffer overflow due to improper validation of array index while processing external DIAG command in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Severity
- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 5% of CVEs (scores of 2026-10-31)
- CWE
- CWE-129
- Published
- Modified
- Record from
- the NVD, synced
Affected
- qualcomm:apq8009_firmware
- qualcomm:apq8009w_firmware
- qualcomm:apq8017_firmware
- qualcomm:apq8037_firmware
- qualcomm:apq8053_firmware
- qualcomm:apq8096au_firmware
- qualcomm:mdm9150_firmware
- qualcomm:mdm9206_firmware
- qualcomm:mdm9250_firmware
- qualcomm:mdm9607_firmware
- qualcomm:mdm9628_firmware
- qualcomm:mdm9640_firmware
- qualcomm:mdm9650_firmware
- qualcomm:msm8108_firmware
- qualcomm:msm8208_firmware
- qualcomm:msm8209_firmware
- qualcomm:msm8608_firmware
- qualcomm:msm8909w_firmware
- qualcomm:msm8917_firmware
- qualcomm:msm8920_firmware
- qualcomm:msm8937_firmware
- qualcomm:msm8940_firmware
- qualcomm:msm8953_firmware
- qualcomm:msm8996au_firmware
- qualcomm:qca6174a_firmware
- qualcomm:qca6310_firmware
- qualcomm:qca6320_firmware
- qualcomm:qca6564a_firmware
- qualcomm:qca6564au_firmware
- qualcomm:qca6574_firmware
- qualcomm:qca6574a_firmware
- qualcomm:qca6574au_firmware
- qualcomm:qca6584_firmware
- qualcomm:qca9367_firmware
- qualcomm:qca9377_firmware
- qualcomm:qca9379_firmware
- qualcomm:qcm2290_firmware
- qualcomm:qcm4290_firmware
- qualcomm:qcs2290_firmware
- qualcomm:qcs4290_firmware
- qualcomm:qualcomm215_firmware
- qualcomm:sd210_firmware
- qualcomm:sd429_firmware
- qualcomm:sd439_firmware
- qualcomm:sd450_firmware
- qualcomm:sd460_firmware
- qualcomm:sd632_firmware
- qualcomm:sd662_firmware
- qualcomm:sd680_firmware
- qualcomm:sd820_firmware