{"id":"CVE-2021-35129","aliases":["EUVD-2021-21773","GHSA-ggj3-m68q-vqqj"],"status":"published","title":"Memory corruption in BT controller due to improper length check while processing vendor specific...","description":"Memory corruption in BT controller due to improper length check while processing vendor specific commands in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00166,"percentile":0.05863,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-120"],"published":"2022-06-14T10:11:28Z","modified":"2026-06-17T03:57:15Z","products":[{"vendor":"qualcomm","product":"ar8035_firmware"},{"vendor":"qualcomm","product":"ipq5010_firmware"},{"vendor":"qualcomm","product":"ipq5018_firmware"},{"vendor":"qualcomm","product":"ipq5028_firmware"},{"vendor":"qualcomm","product":"qca2062_firmware"},{"vendor":"qualcomm","product":"qca2064_firmware"},{"vendor":"qualcomm","product":"qca2065_firmware"},{"vendor":"qualcomm","product":"qca2066_firmware"},{"vendor":"qualcomm","product":"qca6391_firmware"},{"vendor":"qualcomm","product":"qca8081_firmware"},{"vendor":"qualcomm","product":"qca8337_firmware"},{"vendor":"qualcomm","product":"qcc710_firmware"},{"vendor":"qualcomm","product":"qcm6490_firmware"},{"vendor":"qualcomm","product":"qcn6023_firmware"},{"vendor":"qualcomm","product":"qcn6024_firmware"},{"vendor":"qualcomm","product":"qcn6100_firmware"},{"vendor":"qualcomm","product":"qcn6102_firmware"},{"vendor":"qualcomm","product":"qcn6112_firmware"},{"vendor":"qualcomm","product":"qcn6122_firmware"},{"vendor":"qualcomm","product":"qcn6132_firmware"},{"vendor":"qualcomm","product":"qcn9000_firmware"},{"vendor":"qualcomm","product":"qcn9012_firmware"},{"vendor":"qualcomm","product":"qcn9022_firmware"},{"vendor":"qualcomm","product":"qcn9024_firmware"},{"vendor":"qualcomm","product":"qcn9070_firmware"},{"vendor":"qualcomm","product":"qcn9072_firmware"},{"vendor":"qualcomm","product":"qcn9074_firmware"},{"vendor":"qualcomm","product":"qcn9100_firmware"},{"vendor":"qualcomm","product":"qcs6490_firmware"},{"vendor":"qualcomm","product":"sd888_5g_firmware"},{"vendor":"qualcomm","product":"sd888_firmware"},{"vendor":"qualcomm","product":"sd_8_gen1_5g_firmware"},{"vendor":"qualcomm","product":"sd_8cx_gen3_firmware"},{"vendor":"qualcomm","product":"sdx65_firmware"},{"vendor":"qualcomm","product":"wcd9370_firmware"},{"vendor":"qualcomm","product":"wcd9375_firmware"},{"vendor":"qualcomm","product":"wcd9380_firmware"},{"vendor":"qualcomm","product":"wcd9385_firmware"},{"vendor":"qualcomm","product":"wcn6750_firmware"},{"vendor":"qualcomm","product":"wcn6850_firmware"},{"vendor":"qualcomm","product":"wcn6851_firmware"},{"vendor":"qualcomm","product":"wcn6855_firmware"},{"vendor":"qualcomm","product":"wcn6856_firmware"},{"vendor":"qualcomm","product":"wsa8830_firmware"},{"vendor":"qualcomm","product":"wsa8835_firmware"},{"vendor":"qualcomm, inc.","product":"snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking"}],"references":[{"url":"https://www.qualcomm.com/company/product-security/bulletins/april-2022-bulletin","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-35129"},{"url":"https://github.com/advisories/GHSA-ggj3-m68q-vqqj"}],"sources":{"cve":[{"id":"CVE-2021-35129","description":"Memory corruption in BT controller due to improper length check while processing vendor specific commands in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking","status":"published","published":"2022-06-14T10:11:28Z","modified":"2024-08-04T00:33:51.116Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"updated_at":"2026-11-02T14:33:09.864034Z"}],"euvd":[{"id":"EUVD-2021-21773","description":"Memory corruption in BT controller due to improper length check while processing vendor specific commands in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking","status":"published","published":"2022-06-14T10:11:28Z","modified":"2024-08-04T00:33:51Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T03:24:30.986651Z"}],"ghsa":[{"id":"GHSA-ggj3-m68q-vqqj","title":"Memory corruption in BT controller due to improper length check while processing vendor specific...","description":"Memory corruption in BT controller due to improper length check while processing vendor specific commands in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking","status":"published","published":"2022-06-15T00:00:27Z","modified":"2023-01-27T05:04:22Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:42:26.749233Z"}],"nvd":[{"id":"CVE-2021-35129","description":"Memory corruption in BT controller due to improper length check while processing vendor specific commands in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking","status":"published","published":"2022-06-14T10:15:17.633Z","modified":"2026-06-17T03:57:15.467Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:07:06.501652Z"}]}}