CVE-2021-35070

Medium

Description

RPM secure Stream can access any secure resource due to improper SMMU configuration and can lead to information disclosure in Snapdragon Industrial IOT, Snapdragon Mobile

SeverityMedium
CVSS6.5
Exploit probability—
ProductQualcomm Qcm6125 Firmware
PublishedJun 14, 2022
First seenJun 14, 2022

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
qualcomm qcm6125_firmwareNo range specified—
qualcomm qcs6125_firmwareNo range specified—
qualcomm sd665_firmwareNo range specified—
qualcomm wcd9370_firmwareNo range specified—
qualcomm wcd9375_firmwareNo range specified—
qualcomm wcn3950_firmwareNo range specified—
qualcomm wcn3980_firmwareNo range specified—
qualcomm wsa8810_firmwareNo range specified—
qualcomm wsa8815_firmwareNo range specified—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.