CVE-2021-35126
Estado: ModificadaAlta (7.8)—
Memory corruption in DSP service due to improper validation of input parameters in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Puntuación base: 7.8
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.16%
- Percentil entre todas las CVEs puntuadas: 4
- Fecha de la puntuación: 7/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (26)
Qualcomm — Qam8295p FirmwareQualcomm — Qca6391 FirmwareQualcomm — Qca6696 FirmwareQualcomm — Qcm6490 FirmwareQualcomm — Qcs6490 FirmwareQualcomm — Sa8295p FirmwareQualcomm — Sd778g FirmwareQualcomm — Sd780g FirmwareQualcomm — Sd888 5G FirmwareQualcomm — Sd888 FirmwareQualcomm — SD 8 Gen1 5G FirmwareQualcomm — SD 8CX Gen3 FirmwareQualcomm — Sm7315 FirmwareQualcomm — Sm7325p FirmwareQualcomm — Wcd9370 FirmwareQualcomm — Wcd9375 FirmwareQualcomm — Wcd9380 FirmwareQualcomm — Wcd9385 FirmwareQualcomm — Wcn6740 FirmwareQualcomm — Wcn6750 FirmwareQualcomm — Wcn6850 FirmwareQualcomm — Wcn6851 FirmwareQualcomm — Wcn6855 FirmwareQualcomm — Wcn6856 FirmwareQualcomm — Wsa8830 FirmwareQualcomm — Wsa8835 Firmware
CWE
- CWE-129
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2021-35126",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 7.2,
"accessVector": "LOCAL",
"vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
"authentication": "NONE",
"integrityImpact": "COMPLETE",
"accessComplexity": "LOW",
"availabilityImpact": "COMPLETE",
"confidentialityImpact": "COMPLETE"
},
"acInsufInfo": false,
"impactScore": 10,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 3.9,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"type": "Secondary",
"source": "product-security@qualcomm.com",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 8.4,
"attackVector": "LOCAL",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 2.5
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 7.8,
"attackVector": "LOCAL",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "LOW",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 1.8
}
]
},
"affected": [
{
"source": "product-security@qualcomm.com",
"affectedData": [
{
"vendor": "Qualcomm, Inc.",
"product": "Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile",
"versions": [
{
"status": "affected",
"version": "QAM8295P, QCA6391, QCA6696, QCM6490, QCS6490, SA8295P, SD 8 Gen1 5G, SD 8cx Gen3, SD778G, SD780G, SD888, SD888 5G, SM7315, SM7325P, WCD9370, WCD9375, WCD9380, WCD9385, WCN6740, WCN6750, WCN6850, WCN6851, WCN6855, WCN6856, WSA8830, WSA8835"
}
]
}
]
}
],
"published": "2022-06-14T10:15:17.577",
"references": [
{
"url": "https://www.qualcomm.com/company/product-security/bulletins/april-2022-bulletin",
"tags": [
"Vendor Advisory"
],
"source": "product-security@qualcomm.com"
},
{
"url": "https://www.qualcomm.com/company/product-security/bulletins/april-2022-bulletin",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-129"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Memory corruption in DSP service due to improper validation of input parameters in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile"
},
{
"lang": "es",
"value": "Una corrupción de memoria en el servicio DSP debido a una comprobación inapropiada de los parámetros de entrada en Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile"
}
],
"lastModified": "2026-06-17T03:57:15.330",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:qam8295p_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C2D9E281-B382-41AC-84CB-5B1063E5AC51"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:qam8295p:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "44EBEBD5-98C3-493B-A108-FD4DE6FFBE97"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:qca6391_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "83B53119-1B2F-4978-B7F5-33B84BE73B68"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:qca6391:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "6FEBC0C5-CAA1-475C-96C2-B8D24B2E4536"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:qca6696_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0AE207DB-9770-40ED-961D-FDA75965826F"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:qca6696:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "0E23922D-C37F-476F-A623-4C1458A9156F"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:qcm6490_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ADD6D51E-5787-42A6-8A02-4EBBAFFF9C94"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:qcm6490:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "99AA0291-B822-4CAD-BA17-81B632FC3FEF"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:qcs6490_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "403AE561-6C9E-49F3-A5D6-C48DDD51D663"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:qcs6490:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "6FAC140F-FC5E-4C88-B777-7F5EBF49A695"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:sa8295p_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2A19659B-A0C3-44B7-8D54-BA21729873A4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:sa8295p:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "F978041A-CE28-4BDF-A7DB-F0360F1A5F14"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:sd_8_gen1_5g_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "76910884-45D9-4EA2-BA30-44A8C7CC1339"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:sm8475:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "E626A19A-DBE3-4DE9-90DA-FA3F883FF3CF"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:sd_8cx_gen3_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AF04B5E4-D051-4471-886D-4155ED390D7A"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:sd_8cx_gen3:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "1C1B8D95-58C8-4259-9B70-C9A9391FBF47"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:sd778g_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "13286F2B-0FD1-474A-A632-1AA19B110536"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:sd778g:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "F6EA3F98-0F45-44D3-9305-4F548B437011"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:sd780g_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2D52BC3A-6822-43B9-8CEA-2659481A9BA0"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:sd780g:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "CC954854-0407-402B-8013-FAF53F1F5DC7"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:sd888_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "79219DA5-0D09-4CEF-AEFD-917F269AE7DF"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:sd888:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "4D30BACF-71C1-4A6D-8811-9AD708A98307"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:sd888_5g_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B991D515-9072-488F-B338-D7776C70FB62"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:sd888_5g:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "3F65BF0A-CC8F-4A4B-9FD4-7FC7066424F6"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:sm7315_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A4508742-7D97-43D8-B8F5-041F4C588723"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:sm7315:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "CF8C63E8-169F-4164-BD49-348ED894813F"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:sm7325p_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4BEC725F-19B1-4078-B13D-CE624BE23344"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:sm7325p:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "4EA43E38-A12D-49C3-B05C-A2AF07ED2710"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:wcd9370_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1295D869-F4DD-4766-B4AA-3513752F43B4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:wcd9370:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "B98784DC-3143-4D38-AD28-DBBDCCAB4272"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:wcd9375_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "34143ABA-7D09-429F-A65C-3A33438BF62C"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:wcd9375:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "9D56DFE3-5EF1-4B23-BBD5-0203FBF9CCEC"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:wcd9380_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "70292B01-617F-44AD-AF77-1AFC1450523D"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:wcd9380:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "FA94C6D6-85DB-4031-AAF4-C399019AE16D"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:wcd9385_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "92B17201-8185-47F1-9720-5AB4ECD11B22"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:wcd9385:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "E1FA2EB9-416F-4D69-8786-386CC73978AE"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:wcn6740_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FB5DB2B8-25E1-4C0F-8AFB-7627FF9A04E1"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:wcn6740:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "9BB21B3F-6D07-4B45-8A71-DC5490176296"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:wcn6750_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F8EE21BA-7178-4D69-852D-2322844FC6B9"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:wcn6750:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "E9BACB28-F6EA-445A-B74F-0C3881FE59CB"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:wcn6850_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3293739B-53D5-48C1-BC3A-FAA74D6C7954"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:wcn6850:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "E650C510-037F-47DB-A486-EBF871C73278"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:wcn6851_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DD031A8D-A48A-4363-8C00-C1FF5458D0FB"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:wcn6851:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "64F5D7CA-6F31-4842-AC66-EB975C19C83D"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:wcn6855_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "180EB150-C114-429D-941F-9B99CDA4F810"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:wcn6855:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "93BA62AF-3555-463A-8B51-76F07BF0B87E"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:wcn6856_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "54C616C5-6480-4FE0-9A1C-08026CCB08D8"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:wcn6856:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "7D8E02BA-3A7E-4B13-A8D7-20FD0FAE3187"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:wsa8830_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "11B69595-E488-4590-A150-CE5BE08B5E13"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:wsa8830:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "BF680174-5FA6-47D9-8EAB-CC2A37A7BD42"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:wsa8835_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F80BC68E-7476-4A40-9F48-53722FE9A5BF"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:wsa8835:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "6B36F4B2-BAA3-45AD-9967-0EB482C99708"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "product-security@qualcomm.com"
}