CVE-2021-35115
Improper handling of multiple session supported by PVM backend can lead to use after free in...
Improper handling of multiple session supported by PVM backend can lead to use after free in Snapdragon Auto, Snapdragon Mobile
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Improper handling of multiple session supported by PVM backend can lead to use after free in Snapdragon Auto, Snapdragon Mobile
- Record
CVE-2021-35115- CVSS 3.1
- 8.4 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
EUVDEUVD-2021-21759
Improper handling of multiple session supported by PVM backend can lead to use after free in Snapdragon Auto, Snapdragon Mobile
- Record
EUVD-2021-21759- CVSS 3.1
- 8.4 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jvq8-92c5-22jw
Improper handling of multiple session supported by PVM backend can lead to use after free in...
Improper handling of multiple session supported by PVM backend can lead to use after free in Snapdragon Auto, Snapdragon Mobile
- Record
GHSA-jvq8-92c5-22jw- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-416
- Updated
- 2026-11-02
NVD
Improper handling of multiple session supported by PVM backend can lead to use after free in Snapdragon Auto, Snapdragon Mobile
- Record
CVE-2021-35115- CVSS 3.1
- 8.4 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 4.6 Medium
AV:L/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-416
- Updated
- 2026-11-02
Affected products
- qualcomm, inc. snapdragon auto, snapdragon mobile
- qualcomm apq8096au firmware
- qualcomm ar6003 firmware
- qualcomm mdm8215 firmware
- qualcomm mdm8215m firmware
- qualcomm mdm8615m firmware
- qualcomm mdm9215 firmware
- qualcomm mdm9310 firmware
- qualcomm mdm9615 firmware
- qualcomm mdm9615m firmware
- qualcomm msm8996au firmware
- qualcomm qca6564a firmware
Show 17 moreShow less
- qualcomm qca6564au firmware
- qualcomm qca6574a firmware
- qualcomm qca6574au firmware
- qualcomm qca6584au firmware
- qualcomm qca6696 firmware
- qualcomm sa6145p firmware
- qualcomm sa6150p firmware
- qualcomm sa6155p firmware
- qualcomm sa8145p firmware
- qualcomm sa8150p firmware
- qualcomm sa8155p firmware
- qualcomm sa8195p firmware
- qualcomm sa8540p firmware
- qualcomm sa9000p firmware
- qualcomm sdx55 firmware
- qualcomm sdx55m firmware
- qualcomm wcd9341 firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2021-35115 is a high vulnerability (CVSS 8.4) in Qualcomm, Inc. Snapdragon Auto, Snapdragon Mobile, published April 1, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.18%, the 7th percentile. No source names a fixed version.