1. Home
  2. CVE Database
  3. CVE-2021-35113
HIGH · 7.3

CVE-2021-35113

Possible authentication bypass due to improper order of signature verification and hashing in the signature verification call in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdrago...

Vulnerability Description

Possible authentication bypass due to improper order of signature verification and hashing in the signature verification call in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

CVSS Score

7.3

HIGH

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N
Attack Vector
PHYSICAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
NONE

Affected Products

VendorProductVersions
QualcommAqt1000 Firmware-
QualcommAqt1000-
QualcommCsrb31024 Firmware-
QualcommCsrb31024-
QualcommQca6174A Firmware-
QualcommQca6174A-
QualcommQca6310 Firmware-
QualcommQca6310-
QualcommQca6335 Firmware-
QualcommQca6335-
QualcommQca6420 Firmware-
QualcommQca6420-
QualcommQca6430 Firmware-
QualcommQca6430-
QualcommQca6564Au Firmware-
QualcommQca6564Au-
QualcommQca6574Au Firmware-
QualcommQca6574Au-
QualcommQca6595Au Firmware-
QualcommQca6595Au-

Related Weaknesses (CWE)

CWE-347

References

FAQ

What is CVE-2021-35113?

CVE-2021-35113 is a vulnerability with a CVSS score of 7.3 (HIGH). Possible authentication bypass due to improper order of signature verification and hashing in the signature verification call in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdrago...

How severe is CVE-2021-35113?

CVE-2021-35113 has been rated HIGH with a CVSS base score of 7.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-35113?

Check the references section above for vendor advisories and patch information. Affected products include: Qualcomm Aqt1000 Firmware, Qualcomm Aqt1000, Qualcomm Csrb31024 Firmware, Qualcomm Csrb31024, Qualcomm Qca6174A Firmware.