CVE-2021-35134

Severity: high (CVSS 8.4 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-09-02 · updated 2026-06-17
Weakness: CWE-131

Description

Due to insufficient validation of ELF headers, an Incorrect Calculation of Buffer Size can occur in Boot leading to memory corruption in Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

Affected products

Qualcomm Qca6391 Firmware: all versions
Qualcomm Qcm6490 Firmware: all versions
Qualcomm Qcs6490 Firmware: all versions
Qualcomm Qsm8350 Firmware: all versions
Qualcomm Sd778G Firmware: all versions
Qualcomm Sd780G Firmware: all versions
Qualcomm Sd888 5G Firmware: all versions
Qualcomm Sd888 Firmware: all versions
Qualcomm Sd 8 Gen1 5G Firmware: all versions
Qualcomm Sm7315 Firmware: all versions
Qualcomm Sm7325P Firmware: all versions
Qualcomm Sm7450 Firmware: all versions
Qualcomm Sm8475 Firmware: all versions
Qualcomm Sm8475P Firmware: all versions
Qualcomm Wcd9341 Firmware: all versions
Qualcomm Wcd9370 Firmware: all versions
Qualcomm Wcd9375 Firmware: all versions
Qualcomm Wcd9380 Firmware: all versions
Qualcomm Wcd9385 Firmware: all versions
Qualcomm Wcn6740 Firmware: all versions
Qualcomm Wcn6750 Firmware: all versions
Qualcomm Wcn6850 Firmware: all versions
Qualcomm Wcn6851 Firmware: all versions
Qualcomm Wcn6855 Firmware: all versions
Qualcomm Wcn6856 Firmware: all versions
Qualcomm Wcn7850 Firmware: all versions
Qualcomm Wcn7851 Firmware: all versions
Qualcomm Wsa8830 Firmware: all versions
Qualcomm Wsa8832 Firmware: all versions
Qualcomm Wsa8835 Firmware: all versions

References

Get alerted when CVE-2021-35134 or the next vulnerability affects your stack