CVE-2021-35129

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-06-14 · updated 2026-06-17
Weakness: CWE-120

Description

Memory corruption in BT controller due to improper length check while processing vendor specific commands in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking

Affected products

Qualcomm Ar8035 Firmware: all versions
Qualcomm Ipq5010 Firmware: all versions
Qualcomm Ipq5018 Firmware: all versions
Qualcomm Ipq5028 Firmware: all versions
Qualcomm Qca2062 Firmware: all versions
Qualcomm Qca2064 Firmware: all versions
Qualcomm Qca2065 Firmware: all versions
Qualcomm Qca2066 Firmware: all versions
Qualcomm Qca6391 Firmware: all versions
Qualcomm Qca8081 Firmware: all versions
Qualcomm Qca8337 Firmware: all versions
Qualcomm Qcc710 Firmware: all versions
Qualcomm Qcm6490 Firmware: all versions
Qualcomm Qcn6023 Firmware: all versions
Qualcomm Qcn6024 Firmware: all versions
Qualcomm Qcn6100 Firmware: all versions
Qualcomm Qcn6102 Firmware: all versions
Qualcomm Qcn6112 Firmware: all versions
Qualcomm Qcn6122 Firmware: all versions
Qualcomm Qcn6132 Firmware: all versions
Qualcomm Qcn9000 Firmware: all versions
Qualcomm Qcn9012 Firmware: all versions
Qualcomm Qcn9022 Firmware: all versions
Qualcomm Qcn9024 Firmware: all versions
Qualcomm Qcn9070 Firmware: all versions
Qualcomm Qcn9072 Firmware: all versions
Qualcomm Qcn9074 Firmware: all versions
Qualcomm Qcn9100 Firmware: all versions
Qualcomm Qcs6490 Firmware: all versions
Qualcomm Sd888 5G Firmware: all versions

References

Get alerted when CVE-2021-35129 or the next vulnerability affects your stack