CVE-2021-35068: Qualcomm APQ8009W Firmware

Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days.

Lack of null check while freeing the device information buffer in the Bluetooth HFP protocol can lead to a NULL pointer dereference in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables

Affected products

• Qualcomm APQ8009W Firmware: affected versions not specified
• Qualcomm AQT1000 Firmware: affected versions not specified
• Qualcomm AR8031 Firmware: affected versions not specified
• Qualcomm CSRA6620 Firmware: affected versions not specified
• Qualcomm CSRA6640 Firmware: affected versions not specified
• Qualcomm MSM8909W Firmware: affected versions not specified
• Qualcomm QCA6174A Firmware: affected versions not specified
• Qualcomm QCA6390 Firmware: affected versions not specified
• Qualcomm QCA6391 Firmware: affected versions not specified
• Qualcomm QCA6426 Firmware: affected versions not specified
• Qualcomm QCA6436 Firmware: affected versions not specified
• Qualcomm QCA6574 Firmware: affected versions not specified
• Qualcomm QCA6574A Firmware: affected versions not specified
• Qualcomm QCA6574AU Firmware: affected versions not specified
• Qualcomm QCA6595AU Firmware: affected versions not specified
• Qualcomm QCA6696 Firmware: affected versions not specified
• Qualcomm QCA9377 Firmware: affected versions not specified
• Qualcomm QCM2290 Firmware: affected versions not specified
• Qualcomm QCM4290 Firmware: affected versions not specified
• Qualcomm QCM6125 Firmware: affected versions not specified
• Qualcomm QCN9011 Firmware: affected versions not specified
• Qualcomm QCN9012 Firmware: affected versions not specified
• Qualcomm QCS2290 Firmware: affected versions not specified
• Qualcomm QCS405 Firmware: affected versions not specified
• Qualcomm QCS410 Firmware: affected versions not specified
• and 75 more

Published 2022-02-11. Last modified 2026-06-17.