ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2021-35097

—
CVSS 3.1
6.8 medium
EPSS
<1%p8
Published
()
Modified
Description

Possible authentication bypass due to improper order of signature verification and hashing in the signature verification call in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Vendors
qualcomm
Products
aqt1000 firmware, ar8031 firmware, ar8035 firmware, csra6620 firmware, csra6640 firmware, csrb31024 firmware, mdm9150 firmware, qca6174a firmware, qca6175a firmware, qca6310 firmware, qca6335 firmware, qca6390 firmware
Weakness
CWE-347
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news

No ingested article mentions this CVE yet.