High severity · published Jun 14, 2022
CVE-2021-35095
Improper serialization of message queue client registration can lead to race condition allowing multiple gunyah message clients to register with same label in Snapdragon…
7.0
CVSS
0.2%
EPSS
No
On KEV
Description
Improper serialization of message queue client registration can lead to race condition allowing multiple gunyah message clients to register with same label in Snapdragon Connectivity, Snapdragon Mobile
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
High
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 4% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AF
Ar8035 Firmware · Qualcomm
All versions, or not specified · source: NVD
QF
Qca8081 Firmware · Qualcomm
All versions, or not specified · source: NVD
QF
Qca8337 Firmware · Qualcomm
All versions, or not specified · source: NVD
S8
SD 8 Gen1 5g Firmware · Qualcomm
All versions, or not specified · source: NVD
SF
Sdx65 Firmware · Qualcomm
All versions, or not specified · source: NVD
WF
Wcd9380 Firmware · Qualcomm
All versions, or not specified · source: NVD
WF
Wcn6855 Firmware · Qualcomm
All versions, or not specified · source: NVD
WF
Wcn6856 Firmware · Qualcomm
All versions, or not specified · source: NVD
WF
Wsa8830 Firmware · Qualcomm
All versions, or not specified · source: NVD
WF
Wsa8835 Firmware · Qualcomm
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-35095
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-35095
Patch
https://www.qualcomm.com/company/product-security/bulletins/april-2022-bulletin
More from Ar8035 Firmware
7.8
CVE-2026-21385
Integer Overflow or Wraparound in Graphics
7.8
CVE-2023-33107
Integer Overflow or Wraparound in Graphics Linux
7.8
CVE-2023-33106
Use of Out-of-range Pointer Offset in Graphics
7.8
CVE-2023-33063
Use After Free in DSP Services
7.8
CVE-2022-22071
Qualcomm Multiple Chipsets Use-After-Free Vulnerability