Vulnerabilities > CVE-2021-35101 - Reachable Assertion vulnerability in Qualcomm products

CVSS 6.5 - MEDIUM

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

local

low complexity

qualcomm

CWE-617

NVD

Published: 2022-06-14

Updated: 2022-06-22

Summary

Improper handling of writes to virtual GICR control can lead to assertion failure in the hypervisor in Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile

Vulnerable Configurations

Part	Description	Count
OS	Qualcomm Qualcomm Aqt1000 Firmware - Qualcomm Qca6390 Firmware - Qualcomm Qca6391 Firmware - Qualcomm Qca6420 Firmware - Qualcomm Qca6421 Firmware - Qualcomm Qca6426 Firmware - Qualcomm Qca6430 Firmware - Qualcomm Qca6431 Firmware - Qualcomm Qca6436 Firmware - Qualcomm Sa8540P Firmware - Qualcomm Sa9000P Firmware - Qualcomm SD 8CX Firmware - Qualcomm SD 8CX Gen2 Firmware - Qualcomm Sd865 5G Firmware - Qualcomm Sd870 Firmware - Qualcomm Sd888 5G Firmware - Qualcomm Sdx55M Firmware - Qualcomm Sdxr2 5G Firmware - Qualcomm Wcd9340 Firmware - Qualcomm Wcd9341 Firmware - Qualcomm Wcd9380 Firmware - Qualcomm Wcn3998 Firmware - Qualcomm Wsa8810 Firmware - Qualcomm Wsa8815 Firmware -	24
Hardware	Qualcomm Qualcomm Aqt1000 - Qualcomm Qca6390 - Qualcomm Qca6391 - Qualcomm Qca6420 - Qualcomm Qca6421 - Qualcomm Qca6426 - Qualcomm Qca6430 - Qualcomm Qca6431 - Qualcomm Qca6436 - Qualcomm Sa8540P - Qualcomm Sa9000P - Qualcomm SD 8CX - Qualcomm SD 8CX Gen2 - Qualcomm Sd865 5G - Qualcomm Sd870 - Qualcomm Sd888 5G - Qualcomm Sdx55M - Qualcomm Sdxr2 5G - Qualcomm Wcd9340 - Qualcomm Wcd9341 - Qualcomm Wcd9380 - Qualcomm Wcn3998 - Qualcomm Wsa8810 - Qualcomm Wsa8815 -	24

Common Weakness Enumeration (CWE)

CWE-617 - Reachable Assertion

References

https://www.qualcomm.com/company/product-security/bulletins/june-2022-bulletin