{"id":"CVE-2021-35132","aliases":["EUVD-2021-21776","GHSA-q3w4-jffm-75f2"],"status":"published","title":"Out of bound write in DSP service due to improper bound check for response buffer size in...","description":"Out of bound write in DSP service due to improper bound check for response buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables","severity":{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00124,"percentile":0.02192,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-119","CWE-1284"],"published":"2022-09-02T11:31:00Z","modified":"2026-06-17T03:57:15Z","products":[{"vendor":"qualcomm","product":"aqt1000_firmware"},{"vendor":"qualcomm","product":"ar8035_firmware"},{"vendor":"qualcomm","product":"qca6390_firmware"},{"vendor":"qualcomm","product":"qca6391_firmware"},{"vendor":"qualcomm","product":"qca6420_firmware"},{"vendor":"qualcomm","product":"qca6421_firmware"},{"vendor":"qualcomm","product":"qca6426_firmware"},{"vendor":"qualcomm","product":"qca6430_firmware"},{"vendor":"qualcomm","product":"qca6431_firmware"},{"vendor":"qualcomm","product":"qca6436_firmware"},{"vendor":"qualcomm","product":"qca6574_firmware"},{"vendor":"qualcomm","product":"qca6574a_firmware"},{"vendor":"qualcomm","product":"qca6574au_firmware"},{"vendor":"qualcomm","product":"qca6595au_firmware"},{"vendor":"qualcomm","product":"qca6696_firmware"},{"vendor":"qualcomm","product":"qca8081_firmware"},{"vendor":"qualcomm","product":"qca8337_firmware"},{"vendor":"qualcomm","product":"qcm2290_firmware"},{"vendor":"qualcomm","product":"qcm4290_firmware"},{"vendor":"qualcomm","product":"qcm6490_firmware"},{"vendor":"qualcomm","product":"qcs2290_firmware"},{"vendor":"qualcomm","product":"qcs410_firmware"},{"vendor":"qualcomm","product":"qcs4290_firmware"},{"vendor":"qualcomm","product":"qcs610_firmware"},{"vendor":"qualcomm","product":"qcs6490_firmware"},{"vendor":"qualcomm","product":"qrb5165_firmware"},{"vendor":"qualcomm","product":"qrb5165m_firmware"},{"vendor":"qualcomm","product":"qrb5165n_firmware"},{"vendor":"qualcomm","product":"qsm8350_firmware"},{"vendor":"qualcomm","product":"sa515m_firmware"},{"vendor":"qualcomm","product":"sa6155_firmware"},{"vendor":"qualcomm","product":"sa6155p_firmware"},{"vendor":"qualcomm","product":"sa8155_firmware"},{"vendor":"qualcomm","product":"sa8155p_firmware"},{"vendor":"qualcomm","product":"sa8195p_firmware"},{"vendor":"qualcomm","product":"sa8540p_firmware"},{"vendor":"qualcomm","product":"sa9000p_firmware"},{"vendor":"qualcomm","product":"sd429_firmware"},{"vendor":"qualcomm","product":"sd460_firmware"},{"vendor":"qualcomm","product":"sd480_firmware"},{"vendor":"qualcomm","product":"sd662_firmware"},{"vendor":"qualcomm","product":"sd665_firmware"},{"vendor":"qualcomm","product":"sd670_firmware"},{"vendor":"qualcomm","product":"sd675_firmware"},{"vendor":"qualcomm","product":"sd678_firmware"},{"vendor":"qualcomm","product":"sd680_firmware"},{"vendor":"qualcomm","product":"sd690_5g_firmware"},{"vendor":"qualcomm","product":"sd695_firmware"},{"vendor":"qualcomm","product":"sd710_firmware"},{"vendor":"qualcomm","product":"sd720g_firmware"},{"vendor":"qualcomm","product":"sd730_firmware"},{"vendor":"qualcomm","product":"sd750g_firmware"},{"vendor":"qualcomm","product":"sd765_firmware"},{"vendor":"qualcomm","product":"sd765g_firmware"},{"vendor":"qualcomm","product":"sd768g_firmware"},{"vendor":"qualcomm","product":"sd778g_firmware"},{"vendor":"qualcomm","product":"sd780g_firmware"},{"vendor":"qualcomm","product":"sd7c_firmware"},{"vendor":"qualcomm","product":"sd855_firmware"},{"vendor":"qualcomm","product":"sd865_5g_firmware"},{"vendor":"qualcomm","product":"sd870_firmware"},{"vendor":"qualcomm","product":"sd888_5g_firmware"},{"vendor":"qualcomm","product":"sd888_firmware"},{"vendor":"qualcomm","product":"sd_675_firmware"},{"vendor":"qualcomm","product":"sd_8cx_gen2_firmware"},{"vendor":"qualcomm","product":"sd_8cx_gen3_firmware"},{"vendor":"qualcomm","product":"sdm429w_firmware"},{"vendor":"qualcomm","product":"sdx50m_firmware"},{"vendor":"qualcomm","product":"sdx55_firmware"},{"vendor":"qualcomm","product":"sdx55m_firmware"},{"vendor":"qualcomm","product":"sdx65_firmware"},{"vendor":"qualcomm","product":"sdxr2_5g_firmware"},{"vendor":"qualcomm","product":"sm4125_firmware"},{"vendor":"qualcomm","product":"sm6250_firmware"},{"vendor":"qualcomm","product":"sm6250p_firmware"},{"vendor":"qualcomm","product":"sm7250p_firmware"},{"vendor":"qualcomm","product":"sm7315_firmware"},{"vendor":"qualcomm","product":"sm7325p_firmware"},{"vendor":"qualcomm","product":"sw5100_firmware"},{"vendor":"qualcomm","product":"sw5100p_firmware"},{"vendor":"qualcomm","product":"wcd9326_firmware"},{"vendor":"qualcomm","product":"wcd9340_firmware"},{"vendor":"qualcomm","product":"wcd9341_firmware"},{"vendor":"qualcomm","product":"wcd9360_firmware"},{"vendor":"qualcomm","product":"wcd9370_firmware"},{"vendor":"qualcomm","product":"wcd9371_firmware"},{"vendor":"qualcomm","product":"wcd9375_firmware"},{"vendor":"qualcomm","product":"wcd9380_firmware"},{"vendor":"qualcomm","product":"wcd9385_firmware"},{"vendor":"qualcomm","product":"wcn3620_firmware"},{"vendor":"qualcomm","product":"wcn3660b_firmware"},{"vendor":"qualcomm","product":"wcn3910_firmware"},{"vendor":"qualcomm","product":"wcn3950_firmware"},{"vendor":"qualcomm","product":"wcn3980_firmware"},{"vendor":"qualcomm","product":"wcn3988_firmware"},{"vendor":"qualcomm","product":"wcn3990_firmware"},{"vendor":"qualcomm","product":"wcn3991_firmware"},{"vendor":"qualcomm","product":"wcn3998_firmware"},{"vendor":"qualcomm","product":"wcn6740_firmware"},{"vendor":"qualcomm","product":"wcn6750_firmware"},{"vendor":"qualcomm","product":"wcn6850_firmware"},{"vendor":"qualcomm","product":"wcn6851_firmware"},{"vendor":"qualcomm","product":"wcn6855_firmware"},{"vendor":"qualcomm","product":"wcn6856_firmware"},{"vendor":"qualcomm","product":"wcn7850_firmware"},{"vendor":"qualcomm","product":"wcn7851_firmware"},{"vendor":"qualcomm","product":"wsa8810_firmware"},{"vendor":"qualcomm","product":"wsa8815_firmware"},{"vendor":"qualcomm","product":"wsa8830_firmware"},{"vendor":"qualcomm","product":"wsa8835_firmware"},{"vendor":"qualcomm, inc.","product":"snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables"}],"references":[{"url":"https://www.qualcomm.com/company/product-security/bulletins/july-2022-bulletin","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-35132"},{"url":"https://github.com/advisories/GHSA-q3w4-jffm-75f2"}],"sources":{"cve":[{"id":"CVE-2021-35132","description":"Out of bound write in DSP service due to improper bound check for response buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables","status":"published","published":"2022-09-02T11:31:00Z","modified":"2024-08-04T00:33:51.259Z","cvss":[{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"updated_at":"2026-11-02T14:33:09.864034Z"}],"euvd":[{"id":"EUVD-2021-21776","description":"Out of bound write in DSP service due to improper bound check for response buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables","status":"published","published":"2022-09-02T11:31:00Z","modified":"2024-08-04T00:33:51Z","cvss":[{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T03:24:30.986651Z"}],"ghsa":[{"id":"GHSA-q3w4-jffm-75f2","title":"Out of bound write in DSP service due to improper bound check for response buffer size in...","description":"Out of bound write in DSP service due to improper bound check for response buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables","status":"published","published":"2022-09-03T00:00:24Z","modified":"2023-01-29T05:05:39Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:45:50.827495Z"}],"nvd":[{"id":"CVE-2021-35132","description":"Out of bound write in DSP service due to improper bound check for response buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables","status":"published","published":"2022-09-02T12:15:09.113Z","modified":"2026-06-17T03:57:15.78Z","cvss":[{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-1284"],"updated_at":"2026-11-02T14:07:06.906968Z"}]}}