VDB

CVE-2021-35068

CVE-2021-35068 PUBLISHED CVSS 8.399999618530273 HIGH

Lack of null check while freeing the device information buffer in the Bluetooth HFP protocol can lead to a NULL pointer dereference in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables

EPSS 0.23% · 45.8th percentile

Risk Scores

CVSS 3.1
8.399999618530273
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.23%
45.8th percentile

Affected Products

VendorProductVersions
qualcommmsm8909w_firmware
qualcommsa8195p_firmware
qualcommsdx20_firmware
qualcommsd678_firmware
qualcommsa8155p_firmware
qualcommcsra6640_firmware
qualcommsd730_firmware
qualcommsdm429w_firmware
qualcommsa6145p_firmware
qualcommsd765_firmware
qualcommwcn6740_firmware
qualcommsd750g_firmware
qualcommsa6155p_firmware
qualcommqcs610_firmware
qualcommqcm2290_firmware
qualcommar8031_firmware
qualcommsd690_5g_firmware
qualcommwcn3998_firmware
qualcommsdx55m_firmware
qualcommqcn9012_firmware

…and 81 more

Timeline

  • Feb 8, 2022 CVE Published
  • Feb 13, 2022 EPSS Score
  • Apr 6, 2022 EPSS Score
  • May 29, 2022 EPSS Score
  • Jul 21, 2022 EPSS Score
  • Sep 11, 2022 EPSS Score
  • Nov 2, 2022 EPSS Score
  • Dec 25, 2022 EPSS Score
  • Feb 15, 2023 EPSS Score
  • Mar 7, 2023 EPSS Score
  • Apr 8, 2023 EPSS Score
  • May 30, 2023 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›