Critical severity · published Jun 14, 2022
CVE-2021-35081
Possible buffer overflow due to improper validation of SSID length received from beacon or probe response during an IBSS session in Snapdragon Auto, Snapdragon Compute, Snapdragon…
9.8
CVSS
0.8%
EPSS
No
On KEV
Description
Possible buffer overflow due to improper validation of SSID length received from beacon or probe response during an IBSS session in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.8% · higher than 57% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AF
Aqt1000 Firmware · Qualcomm
All versions, or not specified · source: NVD
AF
Ar8035 Firmware · Qualcomm
All versions, or not specified · source: NVD
QF
Qca6390 Firmware · Qualcomm
All versions, or not specified · source: NVD
QF
Qca6391 Firmware · Qualcomm
All versions, or not specified · source: NVD
QF
Qca6564 Firmware · Qualcomm
All versions, or not specified · source: NVD
QF
Qca6564au Firmware · Qualcomm
All versions, or not specified · source: NVD
QF
Qca6574a Firmware · Qualcomm
All versions, or not specified · source: NVD
QF
Qca8081 Firmware · Qualcomm
All versions, or not specified · source: NVD
QF
Qca8337 Firmware · Qualcomm
All versions, or not specified · source: NVD
QF
Qcm2290 Firmware · Qualcomm
All versions, or not specified · source: NVD
QF
Qcm4290 Firmware · Qualcomm
All versions, or not specified · source: NVD
QF
Qcm6125 Firmware · Qualcomm
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-35081
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-35081
Patch
https://www.qualcomm.com/company/product-security/bulletins/april-2022-bulletin
More from Aqt1000 Firmware
8.6
CVE-2025-21479
Incorrect Authorization in Graphics
8.6
CVE-2025-21480
Incorrect Authorization in Graphics Windows
7.8
CVE-2023-33107
Integer Overflow or Wraparound in Graphics Linux
7.8
CVE-2023-33063
Use After Free in DSP Services
7.8
CVE-2020-11261
Qualcomm Multiple Chipsets Improper Input Validation Vulnerability