CVE-2021-35077: Qualcomm AR8035 Firmware

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Possible use after free scenario in compute offloads to DSP while multiple calls spawn a dynamic process in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

Affected products

• Qualcomm AR8035 Firmware: affected versions not specified
• Qualcomm QCA6174A Firmware: affected versions not specified
• Qualcomm QCA6390 Firmware: affected versions not specified
• Qualcomm QCA6391 Firmware: affected versions not specified
• Qualcomm QCA6574 Firmware: affected versions not specified
• Qualcomm QCA6574A Firmware: affected versions not specified
• Qualcomm QCA6574AU Firmware: affected versions not specified
• Qualcomm QCA6595AU Firmware: affected versions not specified
• Qualcomm QCA6696 Firmware: affected versions not specified
• Qualcomm QCA8081 Firmware: affected versions not specified
• Qualcomm QCA8337 Firmware: affected versions not specified
• Qualcomm QCA9377 Firmware: affected versions not specified
• Qualcomm QCM2290 Firmware: affected versions not specified
• Qualcomm QCM4290 Firmware: affected versions not specified
• Qualcomm QCM6490 Firmware: affected versions not specified
• Qualcomm QCS2290 Firmware: affected versions not specified
• Qualcomm QCS4290 Firmware: affected versions not specified
• Qualcomm QCS6490 Firmware: affected versions not specified
• Qualcomm QRB5165 Firmware: affected versions not specified
• Qualcomm QRB5165M Firmware: affected versions not specified
• Qualcomm QRB5165N Firmware: affected versions not specified
• Qualcomm SA6145P Firmware: affected versions not specified
• Qualcomm SA6150P Firmware: affected versions not specified
• Qualcomm SA6155P Firmware: affected versions not specified
• Qualcomm SA8145P Firmware: affected versions not specified
• and 46 more

Published 2022-02-11. Last modified 2026-06-17.