CVE-2021-35113

Severity: medium (CVSS 6.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-09-02 · updated 2026-06-17
Weakness: CWE-347

Description

Possible authentication bypass due to improper order of signature verification and hashing in the signature verification call in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Affected products

Qualcomm Aqt1000 Firmware: all versions
Qualcomm Csrb31024 Firmware: all versions
Qualcomm Qca6174A Firmware: all versions
Qualcomm Qca6310 Firmware: all versions
Qualcomm Qca6335 Firmware: all versions
Qualcomm Qca6420 Firmware: all versions
Qualcomm Qca6430 Firmware: all versions
Qualcomm Qca6564Au Firmware: all versions
Qualcomm Qca6574Au Firmware: all versions
Qualcomm Qca6595Au Firmware: all versions
Qualcomm Qca6696 Firmware: all versions
Qualcomm Qca9377 Firmware: all versions
Qualcomm Qcs410 Firmware: all versions
Qualcomm Qcs610 Firmware: all versions
Qualcomm Sa415M Firmware: all versions
Qualcomm Sd429 Firmware: all versions
Qualcomm Sd675 Firmware: all versions
Qualcomm Sd678 Firmware: all versions
Qualcomm Sd720G Firmware: all versions
Qualcomm Sd730 Firmware: all versions
Qualcomm Sd7C Firmware: all versions
Qualcomm Sd845 Firmware: all versions
Qualcomm Sd850 Firmware: all versions
Qualcomm Sd855 Firmware: all versions
Qualcomm Sd 675 Firmware: all versions
Qualcomm Sdm429W Firmware: all versions
Qualcomm Sdx24 Firmware: all versions
Qualcomm Sdx50M Firmware: all versions
Qualcomm Sdx55 Firmware: all versions
Qualcomm Sdx55M Firmware: all versions

References

Get alerted when CVE-2021-35113 or the next vulnerability affects your stack