Skip to content
OpenAdvisories
Medium · 6.2 CVE-2021-35079 EUVD-2021-21723GHSA-xfmg-hgvr-rfgp

Improper validation of permissions for third party application accessing Telephony service API can lead to information disclosure in Snapdr…

Published Jun 14, 2022 · Updated Aug 4, 2024 · Assigned by qualcomm

Description

Improper validation of permissions for third party application accessing Telephony service API can lead to information disclosure in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

Affected products

VendorProductAffectedFixed
Qualcomm Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile APQ8053, AQT1000, MSM8953, QCA6390, QCA6391, QCA6420, QCA6426, QCA6430, QCA6436, QCM4290, QCS4290, QCS603, QCS605, Qualcomm215, SD460, SD480, SD662, SD680, SD690 5G, SD695, SD750G, SD765, SD765G, SD768G, SD778G, SD780G, SD855, SD865 5G, SD870, SD888 5G, SDX55, SDX55M, SDXR2 5G, SM7250P, SM7325P, WC… —

References