{"id":"CVE-2021-35104","aliases":["EUVD-2021-21748","GHSA-w3v6-c3h3-fpcj"],"status":"published","title":"Possible buffer overflow due to improper parsing of headers while playing the FLAC audio clip in...","description":"Possible buffer overflow due to improper parsing of headers while playing the FLAC audio clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice \u0026 Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.0084,"percentile":0.58176,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-120"],"published":"2022-06-14T10:11:22Z","modified":"2026-06-17T03:57:11Z","products":[{"vendor":"qualcomm","product":"apq8009w_firmware"},{"vendor":"qualcomm","product":"apq8017_firmware"},{"vendor":"qualcomm","product":"apq8064au_firmware"},{"vendor":"qualcomm","product":"apq8096au_firmware"},{"vendor":"qualcomm","product":"aqt1000_firmware"},{"vendor":"qualcomm","product":"ar8031_firmware"},{"vendor":"qualcomm","product":"ar8035_firmware"},{"vendor":"qualcomm","product":"csr8811_firmware"},{"vendor":"qualcomm","product":"csra6620_firmware"},{"vendor":"qualcomm","product":"csra6640_firmware"},{"vendor":"qualcomm","product":"csrb31024_firmware"},{"vendor":"qualcomm","product":"fsm10055_firmware"},{"vendor":"qualcomm","product":"fsm10056_firmware"},{"vendor":"qualcomm","product":"ipq6000_firmware"},{"vendor":"qualcomm","product":"ipq6010_firmware"},{"vendor":"qualcomm","product":"ipq6018_firmware"},{"vendor":"qualcomm","product":"ipq6028_firmware"},{"vendor":"qualcomm","product":"ipq8070_firmware"},{"vendor":"qualcomm","product":"ipq8070a_firmware"},{"vendor":"qualcomm","product":"ipq8071_firmware"},{"vendor":"qualcomm","product":"ipq8071a_firmware"},{"vendor":"qualcomm","product":"ipq8072_firmware"},{"vendor":"qualcomm","product":"ipq8072a_firmware"},{"vendor":"qualcomm","product":"ipq8074_firmware"},{"vendor":"qualcomm","product":"ipq8074a_firmware"},{"vendor":"qualcomm","product":"ipq8076_firmware"},{"vendor":"qualcomm","product":"ipq8076a_firmware"},{"vendor":"qualcomm","product":"ipq8078a_firmware"},{"vendor":"qualcomm","product":"ipq8173_firmware"},{"vendor":"qualcomm","product":"ipq8174_firmware"},{"vendor":"qualcomm","product":"mdm9150_firmware"},{"vendor":"qualcomm","product":"mdm9206_firmware"},{"vendor":"qualcomm","product":"mdm9250_firmware"},{"vendor":"qualcomm","product":"mdm9607_firmware"},{"vendor":"qualcomm","product":"mdm9628_firmware"},{"vendor":"qualcomm","product":"msm8909w_firmware"},{"vendor":"qualcomm","product":"msm8996au_firmware"},{"vendor":"qualcomm","product":"qam8295p_firmware"},{"vendor":"qualcomm","product":"qca4024_firmware"},{"vendor":"qualcomm","product":"qca6174a_firmware"},{"vendor":"qualcomm","product":"qca6390_firmware"},{"vendor":"qualcomm","product":"qca6391_firmware"},{"vendor":"qualcomm","product":"qca6426_firmware"},{"vendor":"qualcomm","product":"qca6428_firmware"},{"vendor":"qualcomm","product":"qca6436_firmware"},{"vendor":"qualcomm","product":"qca6438_firmware"},{"vendor":"qualcomm","product":"qca6564_firmware"},{"vendor":"qualcomm","product":"qca6564a_firmware"},{"vendor":"qualcomm","product":"qca6564au_firmware"},{"vendor":"qualcomm","product":"qca6574_firmware"},{"vendor":"qualcomm","product":"qca6574a_firmware"},{"vendor":"qualcomm","product":"qca6574au_firmware"},{"vendor":"qualcomm","product":"qca6584au_firmware"},{"vendor":"qualcomm","product":"qca6595au_firmware"},{"vendor":"qualcomm","product":"qca6696_firmware"},{"vendor":"qualcomm","product":"qca8075_firmware"},{"vendor":"qualcomm","product":"qca8081_firmware"},{"vendor":"qualcomm","product":"qca8337_firmware"},{"vendor":"qualcomm","product":"qca9367_firmware"},{"vendor":"qualcomm","product":"qca9377_firmware"},{"vendor":"qualcomm","product":"qca9889_firmware"},{"vendor":"qualcomm","product":"qcm2290_firmware"},{"vendor":"qualcomm","product":"qcm4290_firmware"},{"vendor":"qualcomm","product":"qcm6125_firmware"},{"vendor":"qualcomm","product":"qcm6490_firmware"},{"vendor":"qualcomm","product":"qcn5022_firmware"},{"vendor":"qualcomm","product":"qcn5024_firmware"},{"vendor":"qualcomm","product":"qcn5052_firmware"},{"vendor":"qualcomm","product":"qcn5064_firmware"},{"vendor":"qualcomm","product":"qcn5122_firmware"},{"vendor":"qualcomm","product":"qcn5124_firmware"},{"vendor":"qualcomm","product":"qcn5152_firmware"},{"vendor":"qualcomm","product":"qcn5164_firmware"},{"vendor":"qualcomm","product":"qcn5550_firmware"},{"vendor":"qualcomm","product":"qcn9000_firmware"},{"vendor":"qualcomm","product":"qcn9011_firmware"},{"vendor":"qualcomm","product":"qcn9012_firmware"},{"vendor":"qualcomm","product":"qcn9074_firmware"},{"vendor":"qualcomm","product":"qcs2290_firmware"},{"vendor":"qualcomm","product":"qcs405_firmware"},{"vendor":"qualcomm","product":"qcs410_firmware"},{"vendor":"qualcomm","product":"qcs4290_firmware"},{"vendor":"qualcomm","product":"qcs603_firmware"},{"vendor":"qualcomm","product":"qcs605_firmware"},{"vendor":"qualcomm","product":"qcs610_firmware"},{"vendor":"qualcomm","product":"qcs6125_firmware"},{"vendor":"qualcomm","product":"qcs6490_firmware"},{"vendor":"qualcomm","product":"qcx315_firmware"},{"vendor":"qualcomm","product":"qrb5165_firmware"},{"vendor":"qualcomm","product":"qrb5165m_firmware"},{"vendor":"qualcomm","product":"qrb5165n_firmware"},{"vendor":"qualcomm","product":"qsm8250_firmware"},{"vendor":"qualcomm","product":"qsw8573_firmware"},{"vendor":"qualcomm","product":"sa4150p_firmware"},{"vendor":"qualcomm","product":"sa4155p_firmware"},{"vendor":"qualcomm","product":"sa415m_firmware"},{"vendor":"qualcomm","product":"sa515m_firmware"},{"vendor":"qualcomm","product":"sa6145p_firmware"},{"vendor":"qualcomm","product":"sa6150p_firmware"},{"vendor":"qualcomm","product":"sa6155_firmware"},{"vendor":"qualcomm","product":"sa6155p_firmware"},{"vendor":"qualcomm","product":"sa8145p_firmware"},{"vendor":"qualcomm","product":"sa8150p_firmware"},{"vendor":"qualcomm","product":"sa8155_firmware"},{"vendor":"qualcomm","product":"sa8155p_firmware"},{"vendor":"qualcomm","product":"sa8195p_firmware"},{"vendor":"qualcomm","product":"sa8295p_firmware"},{"vendor":"qualcomm","product":"sd205_firmware"},{"vendor":"qualcomm","product":"sd210_firmware"},{"vendor":"qualcomm","product":"sd429_firmware"},{"vendor":"qualcomm","product":"sd439_firmware"},{"vendor":"qualcomm","product":"sd460_firmware"},{"vendor":"qualcomm","product":"sd480_firmware"},{"vendor":"qualcomm","product":"sd660_firmware"},{"vendor":"qualcomm","product":"sd662_firmware"},{"vendor":"qualcomm","product":"sd665_firmware"},{"vendor":"qualcomm","product":"sd675_firmware"},{"vendor":"qualcomm","product":"sd678_firmware"},{"vendor":"qualcomm","product":"sd690_5g_firmware"},{"vendor":"qualcomm","product":"sd720g_firmware"},{"vendor":"qualcomm","product":"sd730_firmware"},{"vendor":"qualcomm","product":"sd750g_firmware"},{"vendor":"qualcomm","product":"sd765_firmware"},{"vendor":"qualcomm","product":"sd765g_firmware"},{"vendor":"qualcomm","product":"sd768g_firmware"},{"vendor":"qualcomm","product":"sd778g_firmware"},{"vendor":"qualcomm","product":"sd780g_firmware"},{"vendor":"qualcomm","product":"sd855_firmware"},{"vendor":"qualcomm","product":"sd865_5g_firmware"},{"vendor":"qualcomm","product":"sd870_firmware"},{"vendor":"qualcomm","product":"sd888_5g_firmware"},{"vendor":"qualcomm","product":"sd888_firmware"},{"vendor":"qualcomm","product":"sd_675_firmware"},{"vendor":"qualcomm","product":"sd_8_gen1_5g_firmware"},{"vendor":"qualcomm","product":"sda429w_firmware"},{"vendor":"qualcomm","product":"sdm429w_firmware"},{"vendor":"qualcomm","product":"sdw2500_firmware"},{"vendor":"qualcomm","product":"sdx12_firmware"},{"vendor":"qualcomm","product":"sdx20_firmware"},{"vendor":"qualcomm","product":"sdx24_firmware"},{"vendor":"qualcomm","product":"sdx55_firmware"},{"vendor":"qualcomm","product":"sdx55m_firmware"},{"vendor":"qualcomm","product":"sdx65_firmware"},{"vendor":"qualcomm","product":"sdxr1_firmware"},{"vendor":"qualcomm","product":"sdxr2_5g_firmware"},{"vendor":"qualcomm","product":"sm6250_firmware"},{"vendor":"qualcomm","product":"sm6250p_firmware"},{"vendor":"qualcomm","product":"sm6375_firmware"},{"vendor":"qualcomm","product":"sm7250p_firmware"},{"vendor":"qualcomm","product":"sm7315_firmware"},{"vendor":"qualcomm","product":"sm7325p_firmware"},{"vendor":"qualcomm","product":"sw5100_firmware"},{"vendor":"qualcomm","product":"sw5100p_firmware"},{"vendor":"qualcomm","product":"sxr2150p_firmware"},{"vendor":"qualcomm","product":"wcd9330_firmware"},{"vendor":"qualcomm","product":"wcd9360_firmware"},{"vendor":"qualcomm","product":"wcd9370_firmware"},{"vendor":"qualcomm","product":"wcd9375_firmware"},{"vendor":"qualcomm","product":"wcd9380_firmware"},{"vendor":"qualcomm","product":"wcd9385_firmware"},{"vendor":"qualcomm","product":"wcn3610_firmware"},{"vendor":"qualcomm","product":"wcn3620_firmware"},{"vendor":"qualcomm","product":"wcn3910_firmware"},{"vendor":"qualcomm","product":"wcn3950_firmware"},{"vendor":"qualcomm","product":"wcn3988_firmware"},{"vendor":"qualcomm","product":"wcn3991_firmware"},{"vendor":"qualcomm","product":"wcn3998_firmware"},{"vendor":"qualcomm","product":"wcn3999_firmware"},{"vendor":"qualcomm","product":"wcn6740_firmware"},{"vendor":"qualcomm","product":"wcn6750_firmware"},{"vendor":"qualcomm","product":"wcn6850_firmware"},{"vendor":"qualcomm","product":"wcn6851_firmware"},{"vendor":"qualcomm","product":"wcn6855_firmware"},{"vendor":"qualcomm","product":"wcn6856_firmware"},{"vendor":"qualcomm","product":"wsa8830_firmware"},{"vendor":"qualcomm","product":"wsa8835_firmware"},{"vendor":"qualcomm, inc.","product":"snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice \u0026 music, snapdragon wearables, snapdragon wired infrastructure and networking"}],"references":[{"url":"https://www.qualcomm.com/company/product-security/bulletins/april-2022-bulletin","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-35104"},{"url":"https://github.com/advisories/GHSA-w3v6-c3h3-fpcj"}],"sources":{"cve":[{"id":"CVE-2021-35104","description":"Possible buffer overflow due to improper parsing of headers while playing the FLAC audio clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice \u0026 Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking","status":"published","published":"2022-06-14T10:11:22Z","modified":"2024-08-04T00:33:51.212Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"updated_at":"2026-11-02T14:33:09.864034Z"}],"euvd":[{"id":"EUVD-2021-21748","description":"Possible buffer overflow due to improper parsing of headers while playing the FLAC audio clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice \u0026 Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking","status":"published","published":"2022-06-14T10:11:22Z","modified":"2024-08-04T00:33:51Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-03T03:24:30.986651Z"}],"ghsa":[{"id":"GHSA-w3v6-c3h3-fpcj","title":"Possible buffer overflow due to improper parsing of headers while playing the FLAC audio clip in...","description":"Possible buffer overflow due to improper parsing of headers while playing the FLAC audio clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice \u0026 Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking","status":"published","published":"2022-06-15T00:00:26Z","modified":"2023-01-27T05:04:22Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:42:26.749233Z"}],"nvd":[{"id":"CVE-2021-35104","description":"Possible buffer overflow due to improper parsing of headers while playing the FLAC audio clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice \u0026 Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking","status":"published","published":"2022-06-14T10:15:17.017Z","modified":"2026-06-17T03:57:11.897Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:07:06.501652Z"}]}}