Skip to content
OpenAdvisories
High · 8.4 CVE-2021-35074 EUVD-2021-21718GHSA-99jj-cr4x-25gh

Possible integer overflow due to improper fragment datatype while calculating number of fragments in a request message in Snapdragon Auto, …

Published Feb 11, 2022 · Updated Aug 4, 2024 · Assigned by qualcomm

Vendor: Qualcomm Product: Snapdragon Auto, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

Description

Possible integer overflow due to improper fragment datatype while calculating number of fragments in a request message in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

Affected products

VendorProductAffectedFixed
Qualcomm Snapdragon Auto, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile AR8035, QCA6174A, QCA6391, QCA6574AU, QCA6595AU, QCA6696, QCA8081, QCA8337, QCA9377, QCM6490, QCS6490, SA6145P, SA6150P, SA6155P, SA8145P, SA8150P, SA8155P, SA8195P, SD 8 Gen1 5G, SD480, SD888 5G, SDX12, SDX65, SM6375, WCD9335, WCD9370, WCD9375, WCD9380, WCD9385, WCN3988, WCN3991, WCN3998, WCN6750,… —

References