PT-2022-10398
CVE-2021-35077
·
Published
2022-02-11
·
Updated
2023-04-19
Description by
CVSS 3.1
8.4
HighMetricsAV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Snapdragon Auto (affected versions not specified)
Snapdragon Compute (affected versions not specified)
Snapdragon Connectivity (affected versions not specified)
Snapdragon Industrial IOT (affected versions not specified)
Snapdragon Mobile (affected versions not specified)
Description
The issue involves a possible use after free scenario in compute offloads to DSP while multiple calls spawn a dynamic process. This affects various Snapdragon products, including Auto, Compute, Connectivity, Industrial IOT, and Mobile.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾