VulnerabilityModified
CVE-2021-35133
Use after free in the synx driver issue while performing other functions during multiple invocation of synx release calls in Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
MEDIUM 6.7EPSS 0.12%
Does this matter?
Lower severity and a low EPSS score (0.12%). Track it; it rarely justifies an emergency change on its own.
Description
Use after free in the synx driver issue while performing other functions during multiple invocation of synx release calls in Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
- CVSS 3.1
- 6.7 MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 0.12% probability · 2th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-416
- Affected
- qualcomm/ar8035 firmware · qualcomm/qca6174a firmware · qualcomm/qca6391 firmware · qualcomm/qca8081 firmware · qualcomm/qca8337 firmware · qualcomm/qca9377 firmware · qualcomm/qcm6490 firmware · qualcomm/qcs6490 firmware · qualcomm/sd 8 gen1 5g firmware · qualcomm/sd480 firmware · qualcomm/sd780g firmware · qualcomm/sd888 5g firmware · qualcomm/sdx12 firmware · qualcomm/sdx65 firmware · qualcomm/sm7450 firmware · qualcomm/sm8475 firmware · qualcomm/sm8475p firmware · qualcomm/wcd9335 firmware · qualcomm/wcd9341 firmware · qualcomm/wcd9370 firmware · +16 more
- Source
- product-security@qualcomm.com
References
- https://www.qualcomm.com/company/product-security/bulletins/july-2022-bulletinPatch, Vendor Advisory
- https://www.qualcomm.com/company/product-security/bulletins/july-2022-bulletinPatch, Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.