What’s Vulnerable › Vulnerabilities

CVE-2021-35095

• Severity: high (CVSS 7.0 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-06-14 · updated 2026-06-17
• Weakness: CWE-502

Description

Improper serialization of message queue client registration can lead to race condition allowing multiple gunyah message clients to register with same label in Snapdragon Connectivity, Snapdragon Mobile

Affected products

• Qualcomm Ar8035 Firmware: all versions
• Qualcomm Qca8081 Firmware: all versions
• Qualcomm Qca8337 Firmware: all versions
• Qualcomm Sd 8 Gen1 5G Firmware: all versions
• Qualcomm Sdx65 Firmware: all versions
• Qualcomm Wcd9380 Firmware: all versions
• Qualcomm Wcn6855 Firmware: all versions
• Qualcomm Wcn6856 Firmware: all versions
• Qualcomm Wsa8830 Firmware: all versions
• Qualcomm Wsa8835 Firmware: all versions

References

• https://www.qualcomm.com/company/product-security/bulletins/april-2022-bulletin
• https://www.qualcomm.com/company/product-security/bulletins/april-2022-bulletin

Get alerted when CVE-2021-35095 or the next vulnerability affects your stack