CVE-2021-35080

MEDIUM

6.5

Description

Disabled SMMU from secure side while RPM is assigned a secure stream can lead to information disclosure in Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

CVE Details

CVSS v3.1 Score6.5

SeverityMEDIUM

CVSS VectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Attack VectorLOCAL

ComplexityLOW

Privileges RequiredLOW

User InteractionNONE

Published6/14/2022

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

qualcomm:qcm2290qualcomm:qcm2290_firmwarequalcomm:qcm4290qualcomm:qcm4290_firmwarequalcomm:qcs2290qualcomm:qcs2290_firmwarequalcomm:qcs4290qualcomm:qcs4290_firmwarequalcomm:sd460qualcomm:sd460_firmwarequalcomm:sd480qualcomm:sd480_firmwarequalcomm:sd662qualcomm:sd662_firmwarequalcomm:sd680qualcomm:sd680_firmwarequalcomm:sd695qualcomm:sd695_firmwarequalcomm:sm4125qualcomm:sm4125_firmwarequalcomm:sw5100qualcomm:sw5100_firmwarequalcomm:sw5100pqualcomm:sw5100p_firmwarequalcomm:wcd9370qualcomm:wcd9370_firmwarequalcomm:wcd9375qualcomm:wcd9375_firmwarequalcomm:wcd9385qualcomm:wcd9385_firmwarequalcomm:wcn3910qualcomm:wcn3910_firmwarequalcomm:wcn3950qualcomm:wcn3950_firmwarequalcomm:wcn3980qualcomm:wcn3980_firmwarequalcomm:wcn3988qualcomm:wcn3988_firmwarequalcomm:wcn3991qualcomm:wcn3991_firmwarequalcomm:wcn3998qualcomm:wcn3998_firmwarequalcomm:wsa8810qualcomm:wsa8810_firmwarequalcomm:wsa8815qualcomm:wsa8815_firmwarequalcomm:wsa8830qualcomm:wsa8830_firmwarequalcomm:wsa8835qualcomm:wsa8835_firmware

Weaknesses (CWE)

CWE-200

References

https://www.qualcomm.com/company/product-security/bulletins/may-2022-bulletin(product-security@qualcomm.com)

https://www.qualcomm.com/company/product-security/bulletins/may-2022-bulletin(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.