CVE-2021-35068 PUBLISHED CVSS 8.399999618530273 HIGH

Lack of null check while freeing the device information buffer in the Bluetooth HFP protocol can lead to a NULL pointer dereference in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables

EPSS 0.23% · 45.5th percentile

Risk Scores

CVSS v3.1
8.399999618530273
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.23%
45.5th percentile

Affected Products

VendorProductVersions
qualcommmsm8909w_firmware
qualcommsa8195p_firmware
qualcommsdx20_firmware
qualcommsd678_firmware
qualcommsa8155p_firmware
qualcommcsra6640_firmware
qualcommsd730_firmware
qualcommsdm429w_firmware
qualcommsa6145p_firmware
qualcommsd765_firmware
qualcommwcn6740_firmware
qualcommsd750g_firmware
qualcommsa6155p_firmware
qualcommqcs610_firmware
qualcommqcm2290_firmware
qualcommar8031_firmware
qualcommsd690_5g_firmware
qualcommwcn3998_firmware
qualcommsdx55m_firmware
qualcommqcn9012_firmware

…and 81 more

Timeline

References

Open in Interactive Console →