CVE-2021-35080
Disabled SMMU from secure side while RPM is assigned a secure stream can lead to information...
Disabled SMMU from secure side while RPM is assigned a secure stream can lead to information disclosure in Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
CVE List Score used
Disabled SMMU from secure side while RPM is assigned a secure stream can lead to information disclosure in Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
- Record
CVE-2021-35080- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N - Updated
- 2026-11-02
EUVDEUVD-2021-21724
Disabled SMMU from secure side while RPM is assigned a secure stream can lead to information disclosure in Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
- Record
EUVD-2021-21724- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-57xx-qwh4-c89x
Disabled SMMU from secure side while RPM is assigned a secure stream can lead to information...
Disabled SMMU from secure side while RPM is assigned a secure stream can lead to information disclosure in Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
- Record
GHSA-57xx-qwh4-c89x- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
NVD
Disabled SMMU from secure side while RPM is assigned a secure stream can lead to information disclosure in Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
- Record
CVE-2021-35080- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N - CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - CVSS 2.0
- 4.9 Medium
AV:L/AC:L/Au:N/C:C/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
Affected products
- qualcomm, inc. snapdragon industrial iot, snapdragon mobile, snapdragon wearables
- qualcomm qcm2290 firmware
- qualcomm qcm4290 firmware
- qualcomm qcs2290 firmware
- qualcomm qcs4290 firmware
- qualcomm sd460 firmware
- qualcomm sd480 firmware
- qualcomm sd662 firmware
- qualcomm sd680 firmware
- qualcomm sd695 firmware
- qualcomm sm4125 firmware
- qualcomm sw5100 firmware
Show 14 moreShow less
- qualcomm sw5100p firmware
- qualcomm wcd9370 firmware
- qualcomm wcd9375 firmware
- qualcomm wcd9385 firmware
- qualcomm wcn3910 firmware
- qualcomm wcn3950 firmware
- qualcomm wcn3980 firmware
- qualcomm wcn3988 firmware
- qualcomm wcn3991 firmware
- qualcomm wcn3998 firmware
- qualcomm wsa8810 firmware
- qualcomm wsa8815 firmware
- qualcomm wsa8830 firmware
- qualcomm wsa8835 firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2021-35080 is a medium vulnerability (CVSS 6.5) in Qualcomm, Inc. Snapdragon Industrial Iot, Snapdragon Mobile, Snapdragon Wearables, published June 14, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.17%, the 5th percentile. No source names a fixed version.