Vulnerabilities > CVE-2021-35077 - Use After Free vulnerability in Qualcomm products

047910
CVSS 7.2 - HIGH
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
local
low complexity
qualcomm
CWE-416
NVD
Published: 2022-02-11
Updated: 2022-02-18

Summary

Possible use after free scenario in compute offloads to DSP while multiple calls spawn a dynamic process in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

Vulnerable Configurations

Part Description Count
OS
Qualcomm
71
Hardware
Qualcomm
71

Common Weakness Enumeration (CWE)

References