VulnerabilityModified
CVE-2021-35111
Improper validation of tag id while RRC sending tag id to MAC can lead to TOCTOU race condition in Snapdragon Connectivity, Snapdragon Mobile
MEDIUM 5.9EPSS 0.45%
Does this matter?
Lower severity and a low EPSS score (0.45%). Track it; it rarely justifies an emergency change on its own.
Description
Improper validation of tag id while RRC sending tag id to MAC can lead to TOCTOU race condition in Snapdragon Connectivity, Snapdragon Mobile
- CVSS 3.1
- 5.9 MEDIUMCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 0.45% probability · 38th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-20, CWE-367
- Affected
- qualcomm/ar8035 firmware · qualcomm/qca6390 firmware · qualcomm/qca6391 firmware · qualcomm/qca8081 firmware · qualcomm/qca8337 firmware · qualcomm/sd 8 gen1 5g firmware · qualcomm/sd765 firmware · qualcomm/sd765g firmware · qualcomm/sd768g firmware · qualcomm/sd778g firmware · qualcomm/sd865 5g firmware · qualcomm/sd870 firmware · qualcomm/sd888 5g firmware · qualcomm/sdx55 firmware · qualcomm/sdx55m firmware · qualcomm/sdx65 firmware · qualcomm/sm7250p firmware · qualcomm/sm7450 firmware · qualcomm/sm8475 firmware · qualcomm/sm8475p firmware · +18 more
- Source
- product-security@qualcomm.com
References
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.