Vulnerability Name:

CVE-2021-35079

Assigned:2021-06-21
Published:2022-06-14
Updated:2022-06-22
Summary:Improper validation of permissions for third party application accessing Telephony service API can lead to information disclosure in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
CVSS v3 Severity:5.5 Medium (CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Exploitability Metrics:Attack Vector (AV): Local
Attack Complexity (AC): Low
Privileges Required (PR): Low
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): High
Integrity (I): None
Availibility (A): None
5.5 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Exploitability Metrics:Attack Vector (AV): Local
Attack Complexity (AC): Low
Privileges Required (PR): Low
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): High
Integrity (I): None
Availibility (A): None
CVSS v2 Severity:2.1 Low (CVSS v2 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): None
Availibility (A): None
2.1 Low (CCN CVSS v2 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): None
Availibility (A): None
Vulnerability Type:CWE-281
References:Source: MITRE
Type: CNA
CVE-2021-35079

Source: CONFIRM
Type: Vendor Advisory
https://www.qualcomm.com/company/product-security/bulletins/may-2022-bulletin

Vulnerable Configuration:Configuration 1:
  • cpe:/o:qualcomm:apq8053_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:apq8053:-:*:*:*:*:*:*:*

    • Configuration 2:
  • cpe:/o:qualcomm:aqt1000_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:aqt1000:-:*:*:*:*:*:*:*

    • Configuration 3:
  • cpe:/o:qualcomm:msm8953_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:msm8953:-:*:*:*:*:*:*:*

    • Configuration 4:
  • cpe:/o:qualcomm:qca6390_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qca6390:-:*:*:*:*:*:*:*

    • Configuration 5:
  • cpe:/o:qualcomm:qca6391_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qca6391:-:*:*:*:*:*:*:*

    • Configuration 6:
  • cpe:/o:qualcomm:qca6420_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qca6420:-:*:*:*:*:*:*:*

    • Configuration 7:
  • cpe:/o:qualcomm:qca6426_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qca6426:-:*:*:*:*:*:*:*

    • Configuration 8:
  • cpe:/o:qualcomm:qca6430_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qca6430:-:*:*:*:*:*:*:*

    • Configuration 9:
  • cpe:/o:qualcomm:qca6436_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qca6436:-:*:*:*:*:*:*:*

    • Configuration 10:
  • cpe:/o:qualcomm:qcm4290_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qcm4290:-:*:*:*:*:*:*:*

    • Configuration 11:
  • cpe:/o:qualcomm:qcs4290_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qcs4290:-:*:*:*:*:*:*:*

    • Configuration 12:
  • cpe:/o:qualcomm:qcs603_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qcs603:-:*:*:*:*:*:*:*

    • Configuration 13:
  • cpe:/o:qualcomm:qcs605_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qcs605:-:*:*:*:*:*:*:*

    • Configuration 14:
  • cpe:/o:qualcomm:qualcomm215_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qualcomm215:-:*:*:*:*:*:*:*

    • Configuration 15:
  • cpe:/o:qualcomm:sd460_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sd460:-:*:*:*:*:*:*:*

    • Configuration 16:
  • cpe:/o:qualcomm:sd480_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sd480:-:*:*:*:*:*:*:*

    • Configuration 17:
  • cpe:/o:qualcomm:sd662_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sd662:-:*:*:*:*:*:*:*

    • Configuration 18:
  • cpe:/o:qualcomm:sd680_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sd680:-:*:*:*:*:*:*:*

    • Configuration 19:
  • cpe:/o:qualcomm:sd690_5g_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sd690_5g:-:*:*:*:*:*:*:*

    • Configuration 20:
  • cpe:/o:qualcomm:sd695_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sd695:-:*:*:*:*:*:*:*

    • Configuration 21:
  • cpe:/o:qualcomm:sd750g_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sd750g:-:*:*:*:*:*:*:*

    • Configuration 22:
  • cpe:/o:qualcomm:sd765_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sd765:-:*:*:*:*:*:*:*

    • Configuration 23:
  • cpe:/o:qualcomm:sd765g_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sd765g:-:*:*:*:*:*:*:*

    • Configuration 24:
  • cpe:/o:qualcomm:sd768g_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sd768g:-:*:*:*:*:*:*:*

    • Configuration 25:
  • cpe:/o:qualcomm:sd778g_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sd778g:-:*:*:*:*:*:*:*

    • Configuration 26:
  • cpe:/o:qualcomm:sd780g_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sd780g:-:*:*:*:*:*:*:*

    • Configuration 27:
  • cpe:/o:qualcomm:sd855_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sd855:-:*:*:*:*:*:*:*

    • Configuration 28:
  • cpe:/o:qualcomm:sd865_5g_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sd865_5g:-:*:*:*:*:*:*:*

    • Configuration 29:
  • cpe:/o:qualcomm:sd870_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sd870:-:*:*:*:*:*:*:*

    • Configuration 30:
  • cpe:/o:qualcomm:sd888_5g_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sd888_5g:-:*:*:*:*:*:*:*

    • Configuration 31:
  • cpe:/o:qualcomm:sdx55_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sdx55:-:*:*:*:*:*:*:*

    • Configuration 32:
  • cpe:/o:qualcomm:sdx55m_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sdx55m:-:*:*:*:*:*:*:*

    • Configuration 33:
  • cpe:/o:qualcomm:sdxr2_5g_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sdxr2_5g:-:*:*:*:*:*:*:*

    • Configuration 34:
  • cpe:/o:qualcomm:sm7250p_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sm7250p:-:*:*:*:*:*:*:*

    • Configuration 35:
  • cpe:/o:qualcomm:sm7325p_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sm7325p:-:*:*:*:*:*:*:*

    • Configuration 36:
  • cpe:/o:qualcomm:wcd9326_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wcd9326:-:*:*:*:*:*:*:*

    • Configuration 37:
  • cpe:/o:qualcomm:wcd9341_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wcd9341:-:*:*:*:*:*:*:*

    • Configuration 38:
  • cpe:/o:qualcomm:wcd9370_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wcd9370:-:*:*:*:*:*:*:*

    • Configuration 39:
  • cpe:/o:qualcomm:wcd9375_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wcd9375:-:*:*:*:*:*:*:*

    • Configuration 40:
  • cpe:/o:qualcomm:wcd9380_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wcd9380:-:*:*:*:*:*:*:*

    • Configuration 41:
  • cpe:/o:qualcomm:wcd9385_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wcd9385:-:*:*:*:*:*:*:*

    • Configuration 42:
  • cpe:/o:qualcomm:wcn3615_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wcn3615:-:*:*:*:*:*:*:*

    • Configuration 43:
  • cpe:/o:qualcomm:wcn3660b_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wcn3660b:-:*:*:*:*:*:*:*

    • Configuration 44:
  • cpe:/o:qualcomm:wcn3680_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wcn3680:-:*:*:*:*:*:*:*

    • Configuration 45:
  • cpe:/o:qualcomm:wcn3680b_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wcn3680b:-:*:*:*:*:*:*:*

    • Configuration 46:
  • cpe:/o:qualcomm:wcn3950_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wcn3950:-:*:*:*:*:*:*:*

    • Configuration 47:
  • cpe:/o:qualcomm:wcn3980_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wcn3980:-:*:*:*:*:*:*:*

    • Configuration 48:
  • cpe:/o:qualcomm:wcn3988_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wcn3988:-:*:*:*:*:*:*:*

    • Configuration 49:
  • cpe:/o:qualcomm:wcn3990_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wcn3990:-:*:*:*:*:*:*:*

    • Configuration 50:
  • cpe:/o:qualcomm:wcn3991_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wcn3991:-:*:*:*:*:*:*:*

    • Configuration 51:
  • cpe:/o:qualcomm:wcn3998_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wcn3998:-:*:*:*:*:*:*:*

    • Configuration 52:
  • cpe:/o:qualcomm:wcn6740_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wcn6740:-:*:*:*:*:*:*:*

    • Configuration 53:
  • cpe:/o:qualcomm:wcn6750_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wcn6750:-:*:*:*:*:*:*:*

    • Configuration 54:
  • cpe:/o:qualcomm:wcn6850_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wcn6850:-:*:*:*:*:*:*:*

    • Configuration 55:
  • cpe:/o:qualcomm:wcn6851_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wcn6851:-:*:*:*:*:*:*:*

    • Configuration 56:
  • cpe:/o:qualcomm:wcn6855_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wcn6855:-:*:*:*:*:*:*:*

    • Configuration 57:
  • cpe:/o:qualcomm:wcn6856_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wcn6856:-:*:*:*:*:*:*:*

    • Configuration 58:
  • cpe:/o:qualcomm:wsa8810_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wsa8810:-:*:*:*:*:*:*:*

    • Configuration 59:
  • cpe:/o:qualcomm:wsa8815_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wsa8815:-:*:*:*:*:*:*:*

    • Configuration 60:
  • cpe:/o:qualcomm:wsa8830_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wsa8830:-:*:*:*:*:*:*:*

    • Configuration 61:
  • cpe:/o:qualcomm:wsa8835_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wsa8835:-:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    BACK
    qualcomm apq8053 firmware -
    qualcomm apq8053 -
    qualcomm aqt1000 firmware -
    qualcomm aqt1000 -
    qualcomm msm8953 firmware -
    qualcomm msm8953 -
    qualcomm qca6390 firmware -
    qualcomm qca6390 -
    qualcomm qca6391 firmware -
    qualcomm qca6391 -
    qualcomm qca6420 firmware -
    qualcomm qca6420 -
    qualcomm qca6426 firmware -
    qualcomm qca6426 -
    qualcomm qca6430 firmware -
    qualcomm qca6430 -
    qualcomm qca6436 firmware -
    qualcomm qca6436 -
    qualcomm qcm4290 firmware -
    qualcomm qcm4290 -
    qualcomm qcs4290 firmware -
    qualcomm qcs4290 -
    qualcomm qcs603 firmware -
    qualcomm qcs603 -
    qualcomm qcs605 firmware -
    qualcomm qcs605 -
    qualcomm qualcomm215 firmware -
    qualcomm qualcomm215 -
    qualcomm sd460 firmware -
    qualcomm sd460 -
    qualcomm sd480 firmware -
    qualcomm sd480 -
    qualcomm sd662 firmware -
    qualcomm sd662 -
    qualcomm sd680 firmware -
    qualcomm sd680 -
    qualcomm sd690 5g firmware -
    qualcomm sd690 5g -
    qualcomm sd695 firmware -
    qualcomm sd695 -
    qualcomm sd750g firmware -
    qualcomm sd750g -
    qualcomm sd765 firmware -
    qualcomm sd765 -
    qualcomm sd765g firmware -
    qualcomm sd765g -
    qualcomm sd768g firmware -
    qualcomm sd768g -
    qualcomm sd778g firmware -
    qualcomm sd778g -
    qualcomm sd780g firmware -
    qualcomm sd780g -
    qualcomm sd855 firmware -
    qualcomm sd855 -
    qualcomm sd865 5g firmware -
    qualcomm sd865 5g -
    qualcomm sd870 firmware -
    qualcomm sd870 -
    qualcomm sd888 5g firmware -
    qualcomm sd888 5g -
    qualcomm sdx55 firmware -
    qualcomm sdx55 -
    qualcomm sdx55m firmware -
    qualcomm sdx55m -
    qualcomm sdxr2 5g firmware -
    qualcomm sdxr2 5g -
    qualcomm sm7250p firmware -
    qualcomm sm7250p -
    qualcomm sm7325p firmware -
    qualcomm sm7325p -
    qualcomm wcd9326 firmware -
    qualcomm wcd9326 -
    qualcomm wcd9341 firmware -
    qualcomm wcd9341 -
    qualcomm wcd9370 firmware -
    qualcomm wcd9370 -
    qualcomm wcd9375 firmware -
    qualcomm wcd9375 -
    qualcomm wcd9380 firmware -
    qualcomm wcd9380 -
    qualcomm wcd9385 firmware -
    qualcomm wcd9385 -
    qualcomm wcn3615 firmware -
    qualcomm wcn3615 -
    qualcomm wcn3660b firmware -
    qualcomm wcn3660b -
    qualcomm wcn3680 firmware -
    qualcomm wcn3680 -
    qualcomm wcn3680b firmware -
    qualcomm wcn3680b -
    qualcomm wcn3950 firmware -
    qualcomm wcn3950 -
    qualcomm wcn3980 firmware -
    qualcomm wcn3980 -
    qualcomm wcn3988 firmware -
    qualcomm wcn3988 -
    qualcomm wcn3990 firmware -
    qualcomm wcn3990 -
    qualcomm wcn3991 firmware -
    qualcomm wcn3991 -
    qualcomm wcn3998 firmware -
    qualcomm wcn3998 -
    qualcomm wcn6740 firmware -
    qualcomm wcn6740 -
    qualcomm wcn6750 firmware -
    qualcomm wcn6750 -
    qualcomm wcn6850 firmware -
    qualcomm wcn6850 -
    qualcomm wcn6851 firmware -
    qualcomm wcn6851 -
    qualcomm wcn6855 firmware -
    qualcomm wcn6855 -
    qualcomm wcn6856 firmware -
    qualcomm wcn6856 -
    qualcomm wsa8810 firmware -
    qualcomm wsa8810 -
    qualcomm wsa8815 firmware -
    qualcomm wsa8815 -
    qualcomm wsa8830 firmware -
    qualcomm wsa8830 -
    qualcomm wsa8835 firmware -
    qualcomm wsa8835 -