CVE-2021-35090

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-06-14 · updated 2026-06-17
Weakness: CWE-367

Description

Possible hypervisor memory corruption due to TOC TOU race condition when updating address mappings in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

Affected products

Qualcomm Aqt1000 Firmware: all versions
Qualcomm Qca6390 Firmware: all versions
Qualcomm Qca6391 Firmware: all versions
Qualcomm Qca6420 Firmware: all versions
Qualcomm Qca6421 Firmware: all versions
Qualcomm Qca6426 Firmware: all versions
Qualcomm Qca6430 Firmware: all versions
Qualcomm Qca6431 Firmware: all versions
Qualcomm Qca6436 Firmware: all versions
Qualcomm Qcm6490 Firmware: all versions
Qualcomm Qcs6490 Firmware: all versions
Qualcomm Qrb5165 Firmware: all versions
Qualcomm Qrb5165M Firmware: all versions
Qualcomm Qrb5165N Firmware: all versions
Qualcomm Qsm8350 Firmware: all versions
Qualcomm Sa8540P Firmware: all versions
Qualcomm Sa9000P Firmware: all versions
Qualcomm Sd690 5G Firmware: all versions
Qualcomm Sd750G Firmware: all versions
Qualcomm Sd765 Firmware: all versions
Qualcomm Sd765G Firmware: all versions
Qualcomm Sd768G Firmware: all versions
Qualcomm Sd778G Firmware: all versions
Qualcomm Sd780G Firmware: all versions
Qualcomm Sd865 5G Firmware: all versions
Qualcomm Sd870 Firmware: all versions
Qualcomm Sd888 5G Firmware: all versions
Qualcomm Sd888 Firmware: all versions
Qualcomm Sd 8Cx Firmware: all versions
Qualcomm Sd 8Cx Gen2 Firmware: all versions

References

Get alerted when CVE-2021-35090 or the next vulnerability affects your stack