CVE-2021-35080: Qualcomm QCM2290 Firmware

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

Disabled SMMU from secure side while RPM is assigned a secure stream can lead to information disclosure in Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Affected products

• Qualcomm QCM2290 Firmware: affected versions not specified
• Qualcomm QCM4290 Firmware: affected versions not specified
• Qualcomm QCS2290 Firmware: affected versions not specified
• Qualcomm QCS4290 Firmware: affected versions not specified
• Qualcomm SD460 Firmware: affected versions not specified
• Qualcomm SD480 Firmware: affected versions not specified
• Qualcomm SD662 Firmware: affected versions not specified
• Qualcomm SD680 Firmware: affected versions not specified
• Qualcomm SD695 Firmware: affected versions not specified
• Qualcomm SM4125 Firmware: affected versions not specified
• Qualcomm SW5100 Firmware: affected versions not specified
• Qualcomm SW5100P Firmware: affected versions not specified
• Qualcomm WCD9370 Firmware: affected versions not specified
• Qualcomm WCD9375 Firmware: affected versions not specified
• Qualcomm WCD9385 Firmware: affected versions not specified
• Qualcomm WCN3910 Firmware: affected versions not specified
• Qualcomm WCN3950 Firmware: affected versions not specified
• Qualcomm WCN3980 Firmware: affected versions not specified
• Qualcomm WCN3988 Firmware: affected versions not specified
• Qualcomm WCN3991 Firmware: affected versions not specified
• Qualcomm WCN3998 Firmware: affected versions not specified
• Qualcomm WSA8810 Firmware: affected versions not specified
• Qualcomm WSA8815 Firmware: affected versions not specified
• Qualcomm WSA8830 Firmware: affected versions not specified
• Qualcomm WSA8835 Firmware: affected versions not specified

Published 2022-06-14. Last modified 2026-06-17.