CVE-2021-35070 Information disclosure in Snapdragon Industrial IOT, Snapdragon Mobile
Improper SMMU configuration in Snapdragon firmware allows attackers to access secure resources, leading to information disclosure.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-35070?
CVE-2021-35070 is a medium-severity vulnerability in Qualcomm Qcm6125 Firmware, published on 14 Jun 2022. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
RPM secure Stream can access any secure resource due to improper SMMU configuration and can lead to information disclosure in Snapdragon Industrial IOT, Snapdragon Mobile
Weakness: CWE-200
Which versions are affected by CVE-2021-35070?
It affects 9 products.
Products include Qualcomm Qcm6125 Firmware, Qualcomm Qcs6125 Firmware, Qualcomm Sd665 Firmware, Qualcomm Wcd9370 Firmware, Qualcomm Wcd9375 Firmware, Qualcomm Wcn3950 Firmware and 3 more.
How do I fix CVE-2021-35070?
No fix has been published for CVE-2021-35070 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-35070 being exploited?
There is no known exploitation of CVE-2021-35070 in the wild and no public exploit code.
Other vulnerabilities in Qualcomm Qcm6125 Firmware
Sources
Also known as GHSA-8m85-9jc9-wrwp.