CVE Published: 02/09/2022 |
CVE Updated: 04/08/2024 |
CVE Year: 2021 Source: qualcomm |
Vendor: Qualcomm, Inc. |
Product: Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile Status : PUBLISHED
CVE-2021-35133 Description
Use after free in the synx driver issue while performing other functions during multiple invocation of synx release calls in Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
Metrics
CVSS Version: 3.1 |
Base Score: 6.7 MEDIUM Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
l➤ Exploitability Metrics: Attack Vector (AV)* LOCAL Attack Complexity (AC)* LOW Privileges Required (PR)* HIGH User Interaction (UI)* NONE Scope (S)* UNCHANGED
l➤ Impact Metrics: Confidentiality Impact (C)* HIGH Integrity Impact (I)* HIGH Availability Impact (A)* HIGH
Weakness Enumeration (CWE)
CWE-ID: CWE Name: Use After Free in Automotive OS Source: Qualcomm, Inc.
Common Attack Pattern Enumeration and Classification (CAPEC)