Details of VAR-202203-0003

ID

VAR-202203-0003

CVE

CVE-2021-35103

TITLE

Out-of-bounds write vulnerability in multiple Qualcomm products

Trust: 0.8

sources: JVNDB: JVNDB-2021-019208

DESCRIPTION

Possible out of bound write due to improper validation of number of timer values received from firmware while syncing timers in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking. AR8035 firmware, AR9380 firmware, CSR8811 Several Qualcomm products, such as firmware, contain an out-of-bounds write vulnerability.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state

Trust: 1.62

sources: NVD: CVE-2021-35103 // JVNDB: JVNDB-2021-019208

IOT TAXONOMY

category:	['other device', 'embedded device']	sub_category:	SoC	Trust: 0.1
category:	['other device', 'embedded device']	sub_category:	general	Trust: 0.1

sources: OTHER: None

AFFECTED PRODUCTS

vendor:	qualcomm	model:	sdx65	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	ipq4018	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6554a	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn6850	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	ipq4029	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	ipq8074a	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca9889	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca9886	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd765g	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd780g	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	ipq8078	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6391	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcn5054	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcn9000	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcn5021	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn3998	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcn9072	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca4024	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wsa8810	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcd9385	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcd9375	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6574a	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcn5124	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sm7250p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcn5022	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sm7325p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn6851	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcn6024	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6595	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcn5122	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd765	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	ipq8068	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6426	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcn6112	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	ipq6018	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	ipq4019	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	ipq8064	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	ipq8070	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	pmp8074	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6696	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcn9100	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca9888	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sdxr2 5g	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn3991	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca8337	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcn6122	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sw5100p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	ipq8173	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca9880	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	ipq4028	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	ipq8078a	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd870	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wsa8815	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6584au	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wsa8830	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca9992	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	ipq6010	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	ipq8076	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn3980	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	ipq8065	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcd9370	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca7500	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	csr8811	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sm6375	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa6145p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcn5164	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa8155p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa415m	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa8145p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcn9022	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd662	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca9898	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca9990	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa515m	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn6855	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wsa8835	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6564au	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcm6125	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcn6100	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn6750	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca8081	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcn5154	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	ipq8174	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcm6490	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca8075	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6574au	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa8195p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcn6102	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcn6132	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	csrb31024	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	ipq8076a	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcn9074	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa8155	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd480	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sm7315	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa8150p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6595au	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcn5152	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcs6125	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa4155p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd888	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcd9360	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn3950	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd460	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn6856	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qrb5165	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	ar9380	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca8072	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd865 5g	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sdx55m	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcn9011	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	ipq6028	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sm6225	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcn9012	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qrb5165n	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	ar8035	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa6150p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcd9380	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn3988	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcn9024	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd888 5g	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd 8 gen1 5g	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca9985	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qrb5165m	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd778g	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcs6490	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca9994	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	ipq5028	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca9984	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6574	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcn5052	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcn6023	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa6155p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sw5100	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn6740	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6436	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca9980	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	ipq8072a	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6390	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	ipq8070a	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	ipq5018	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	ipq8071a	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa6155	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd768g	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sdx55	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcn5024	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa4150p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcn9070	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	ipq5010	scope:	eq	version:	-	Trust: 1.0
vendor:	クアルコム	model:	ipq4019	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	csr8811	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	ar9380	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	ipq5018	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	ar8035	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	ipq4018	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	ipq4029	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	csrb31024	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	ipq5010	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	ipq4028	scope:	-	version:	-	Trust: 0.8

sources: JVNDB: JVNDB-2021-019208 // NVD: CVE-2021-35103

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2021-35103
value:	HIGH
Trust: 1.0
product-security@qualcomm.com:	CVE-2021-35103
value:	HIGH
Trust: 1.0
NVD:	CVE-2021-35103
value:	HIGH
Trust: 0.8
CNNVD:	CNNVD-202203-578
value:	HIGH
Trust: 0.6

nvd@nist.gov:	CVE-2021-35103
severity:	HIGH
baseScore:	7.2
vectorString:	AV:L/AC:L/AU:N/C:C/I:C/A:C
accessVector:	LOCAL
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	3.9
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8

nvd@nist.gov:	CVE-2021-35103
baseSeverity:	HIGH
baseScore:	7.8
vectorString:	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	LOW
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	1.8
impactScore:	5.9
version:	3.1
Trust: 2.0
NVD:	CVE-2021-35103
baseSeverity:	HIGH
baseScore:	7.8
vectorString:	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	LOW
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: JVNDB: JVNDB-2021-019208 // CNNVD: CNNVD-202203-578 // NVD: CVE-2021-35103 // NVD: CVE-2021-35103

PROBLEMTYPE DATA

problemtype:	CWE-787	Trust: 1.0
problemtype:	Out-of-bounds writing (CWE-787) [NVD evaluation ]	Trust: 0.8

sources: JVNDB: JVNDB-2021-019208 // NVD: CVE-2021-35103

THREAT TYPE

local

Trust: 0.6

sources: CNNVD: CNNVD-202203-578

TYPE

buffer error

Trust: 0.6

sources: CNNVD: CNNVD-202203-578

PATCH

title:

Multiple Qualcomm Product security vulnerabilities

url:

http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=185013

Trust: 0.6

sources: CNNVD: CNNVD-202203-578

EXTERNAL IDS

db:	NVD	id:	CVE-2021-35103	Trust: 3.3
db:	JVNDB	id:	JVNDB-2021-019208	Trust: 0.8
db:	CS-HELP	id:	SB2022030719	Trust: 0.6
db:	CS-HELP	id:	SB2022030801	Trust: 0.6
db:	AUSCERT	id:	ESB-2022.0953	Trust: 0.6
db:	CNNVD	id:	CNNVD-202203-578	Trust: 0.6
db:	OTHER	id:	NONE	Trust: 0.1

sources: OTHER: None // JVNDB: JVNDB-2021-019208 // CNNVD: CNNVD-202203-578 // NVD: CVE-2021-35103

REFERENCES

url:	https://www.qualcomm.com/company/product-security/bulletins/march-2022-bulletin	Trust: 3.0
url:	https://nvd.nist.gov/vuln/detail/cve-2021-35103	Trust: 0.8
url:	https://vigilance.fr/vulnerability/google-android-pixel-multiple-vulnerabilities-of-march-2022-37726	Trust: 0.6
url:	https://www.cybersecurity-help.cz/vdb/sb2022030801	Trust: 0.6
url:	https://www.cybersecurity-help.cz/vdb/sb2022030719	Trust: 0.6
url:	https://cxsecurity.com/cveshow/cve-2021-35103/	Trust: 0.6
url:	https://source.android.com/security/bulletin/2022-03-01	Trust: 0.6
url:	https://www.auscert.org.au/bulletins/esb-2022.0953	Trust: 0.6
url:	https://ieeexplore.ieee.org/abstract/document/10769424	Trust: 0.1

sources: OTHER: None // JVNDB: JVNDB-2021-019208 // CNNVD: CNNVD-202203-578 // NVD: CVE-2021-35103

SOURCES

db:	OTHER	id:	-
db:	JVNDB	id:	JVNDB-2021-019208
db:	CNNVD	id:	CNNVD-202203-578
db:	NVD	id:	CVE-2021-35103

LAST UPDATE DATE

2025-01-30T22:05:58.781000+00:00

SOURCES UPDATE DATE

db:	JVNDB	id:	JVNDB-2021-019208	date:	2023-07-19T08:29:00
db:	CNNVD	id:	CNNVD-202203-578	date:	2022-04-11T00:00:00
db:	NVD	id:	CVE-2021-35103	date:	2023-04-19T17:10:55.030

SOURCES RELEASE DATE

db:	JVNDB	id:	JVNDB-2021-019208	date:	2023-07-19T00:00:00
db:	CNNVD	id:	CNNVD-202203-578	date:	2022-03-07T00:00:00
db:	NVD	id:	CVE-2021-35103	date:	2022-04-01T05:15:07.463