CVE-2021-35080

Disabled SMMU from secure side while RPM is assigned a secure stream can lead to information disclosure in Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Score

CVSS 3.1 6.5 Medium

Status

Modified - product-security@qualcomm.com

Published

2022-06-14

Last modified

2024-08-04

Weaknesses

CWE-200

Affected products

• Qcm2290 Firmware (Qualcomm)
• Qcm4290 Firmware (Qualcomm)
• Qcs2290 Firmware (Qualcomm)
• Qcs4290 Firmware (Qualcomm)
• Sd460 Firmware (Qualcomm)
• Sd480 Firmware (Qualcomm)
• Sd662 Firmware (Qualcomm)
• Sd680 Firmware (Qualcomm)
• Sd695 Firmware (Qualcomm)
• Sm4125 Firmware (Qualcomm)
• Sw5100 Firmware (Qualcomm)
• Sw5100p Firmware (Qualcomm)
• Wcd9370 Firmware (Qualcomm)
• Wcd9375 Firmware (Qualcomm)
• Wcd9385 Firmware (Qualcomm)
• Wcn3910 Firmware (Qualcomm)
• Wcn3950 Firmware (Qualcomm)
• Wcn3980 Firmware (Qualcomm)
• Wcn3988 Firmware (Qualcomm)
• Wcn3991 Firmware (Qualcomm)
• Wcn3998 Firmware (Qualcomm)
• Wsa8810 Firmware (Qualcomm)
• Wsa8815 Firmware (Qualcomm)
• Wsa8830 Firmware (Qualcomm)
• Wsa8835 Firmware (Qualcomm)
• Snapdragon Industrial Iot (Qualcomm Inc.)
• Snapdragon Mobile (Qualcomm Inc.)
• Snapdragon Wearables (Qualcomm Inc.)

References

• https://www.qualcomm.com/company/product-security/bulletins/may-2022-bulletin