ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2021-35068

—
CVSS 3.1
9.8 critical
EPSS
<1%p43
Published
()
Modified
Description

Lack of null check while freeing the device information buffer in the Bluetooth HFP protocol can lead to a NULL pointer dereference in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables

Vendors
qualcomm
Products
apq8009w firmware, aqt1000 firmware, ar8031 firmware, csra6620 firmware, csra6640 firmware, msm8909w firmware, qca6174a firmware, qca6390 firmware, qca6391 firmware, qca6426 firmware, qca6436 firmware, qca6574 firmware
Weakness
CWE-476
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news

No ingested article mentions this CVE yet.