VULNERABILITY INTELLIGENCE
CVE-2021-35078
CVSS score7.5 HIGH
EPSS probability0.40%
CISA KEVNot currently listed
Published2022-06-14
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description
Possible memory leak due to improper validation of certificate chain length while parsing server certificate chain in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
Weakness classification
- nvd@nist.gov: CWE-401
Primary references
- product-security@qualcomm.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory