CVE-2021-35096

EUVD-2021-21740 · Published Jun 14, 2022

Improper memory allocation during counter check DLM handling can lead to denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

Technologies

Qualcomm Wcn6740 FirmwareQualcomm Sa515M FirmwareQualcomm Wcn6850Qualcomm Wsa8810 FirmwareQualcomm Sd855Qualcomm Wcn6855 FirmwareQualcomm Sdx65Qualcomm Qca6574AQualcomm Wcd9341 FirmwareQualcomm Sd695 FirmwareQualcomm Sdx55MQualcomm Qca6390Qualcomm Wsa8835 FirmwareQualcomm Sd765GQualcomm Wcd9370Qualcomm Wcd9380 FirmwareQualcomm Qca8081Qualcomm Qcs6490 FirmwareQualcomm Sd780GQualcomm Sd888Qualcomm Wcn3998 FirmwareQualcomm Sd750GQualcomm Sd765Qualcomm Qca8337Qualcomm Sa515MQualcomm Sd778G FirmwareQualcomm Qca8081 FirmwareQualcomm Sd 8 Gen1 5G FirmwareQualcomm Wcn3988Qualcomm Qca6391 FirmwareQualcomm Qca6574AuQualcomm Wcn3988 FirmwareQualcomm Qca6426 FirmwareQualcomm Ar8035 FirmwareQualcomm Sd690 5G FirmwareQualcomm Sd778GQualcomm Qca6696Qualcomm Sd765 FirmwareQualcomm Sdxr2 5GQualcomm Sd855 FirmwareQualcomm Sm7315Qualcomm Wcd9385Qualcomm Wcn3991 FirmwareQualcomm Qca6436 FirmwareQualcomm Wcn6851 FirmwareQualcomm Sd750G FirmwareQualcomm Sd780G FirmwareQualcomm Wcn6856Qualcomm Qca6426Qualcomm Sdx55Qualcomm Qca6574Au FirmwareQualcomm Qca6421 FirmwareQualcomm Qca6391Qualcomm Wsa8830Qualcomm Wcd9375Qualcomm Wcn6740Qualcomm Wcn6856 FirmwareQualcomm Sdxr2 5G FirmwareQualcomm Sd480Qualcomm Sd480 FirmwareQualcomm Sd768G FirmwareQualcomm Wcn3998Qualcomm Qca6390 FirmwareQualcomm Wcn6750 FirmwareQualcomm Wcd9370 FirmwareQualcomm Sd768GQualcomm Sm7315 FirmwareQualcomm Wcd9380Qualcomm Sd888 5G FirmwareQualcomm Qca6431Qualcomm Wcn6855Qualcomm Qca6574A FirmwareQualcomm Wsa8810Qualcomm Sd888 FirmwareQualcomm Sd865 5GQualcomm Sdx55M FirmwareQualcomm Wsa8815Qualcomm Qca8337 FirmwareQualcomm Sm7250PQualcomm Qca6431 FirmwareQualcomm Sd690 5GQualcomm Sdx65 FirmwareQualcomm Wcn6850 FirmwareQualcomm Sm7250P FirmwareQualcomm Wcd9360 FirmwareQualcomm Sd695Qualcomm Wsa8830 FirmwareQualcomm Sd765G FirmwareQualcomm Qca6595Au FirmwareQualcomm Sd870 FirmwareQualcomm Wcd9385 FirmwareQualcomm Sd865 5G FirmwareQualcomm Wcn6750Qualcomm Sd870Qualcomm Wsa8835Qualcomm Wsa8815 FirmwareQualcomm Qca6421Qualcomm Wcd9360Qualcomm Wcn3991Qualcomm Qcm6490 FirmwareQualcomm Qcs6490Qualcomm Qca6436Qualcomm Wcd9341Qualcomm Sd888 5GQualcomm Wcn6851Qualcomm Qcm6490Qualcomm Sm8475Qualcomm Qca6595AuQualcomm Sdx55 FirmwareQualcomm Ar8035Qualcomm Qca6696 FirmwareQualcomm Wcd9375 Firmware

Weaknesses

CWE-770

CVSS scores

v3.17.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
v2.07.8AV:N/AC:L/Au:N/C:N/I:N/A:C

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Initial Access Impact

T1190Exploit Public-Facing Application T1498.001Direct Network Flood T1498.002Reflection Amplification T1499Endpoint Denial of Service T1499.001OS Exhaustion Flood T1499.002Service Exhaustion Flood T1499.003Application Exhaustion Flood

References

https://www.qualcomm.com/company/product-security/bulletins/may-2022-bulletin

Potentially impacted assets

See if this affects your attack surface