VULNERABILITY INTELLIGENCE
CVE-2021-35104
CVSS score9.8 CRITICAL
EPSS probability0.83%
CISA KEVNot currently listed
Published2022-06-14
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
Possible buffer overflow due to improper parsing of headers while playing the FLAC audio clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
Weakness classification
- nvd@nist.gov: CWE-120
Primary references
- product-security@qualcomm.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory