VULNERABILITY INTELLIGENCE

CVE-2021-35088

CVSS score8.2 HIGH
EPSS probability0.85%
CISA KEVNot currently listed
Published2022-04-01
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L

Description

Possible out of bound read due to improper validation of IE length during SSID IE parse when channel is DFS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Weakness classification

  • nvd@nist.gov: CWE-125

Primary references