CVE-2021-35086: Qualcomm AR8035 Firmware

High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days.

Possible buffer over read due to improper validation of SIB type when processing a NR system Information message in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

Affected products

• Qualcomm AR8035 Firmware: affected versions not specified
• Qualcomm QCA6390 Firmware: affected versions not specified
• Qualcomm QCA6391 Firmware: affected versions not specified
• Qualcomm QCA6421 Firmware: affected versions not specified
• Qualcomm QCA6426 Firmware: affected versions not specified
• Qualcomm QCA6431 Firmware: affected versions not specified
• Qualcomm QCA6436 Firmware: affected versions not specified
• Qualcomm QCA6574A Firmware: affected versions not specified
• Qualcomm QCA6574AU Firmware: affected versions not specified
• Qualcomm QCA6595AU Firmware: affected versions not specified
• Qualcomm QCA6696 Firmware: affected versions not specified
• Qualcomm QCA8081 Firmware: affected versions not specified
• Qualcomm QCA8337 Firmware: affected versions not specified
• Qualcomm QCM6490 Firmware: affected versions not specified
• Qualcomm QCS6490 Firmware: affected versions not specified
• Qualcomm SA515M Firmware: affected versions not specified
• Qualcomm SD480 Firmware: affected versions not specified
• Qualcomm SD690 5g Firmware: affected versions not specified
• Qualcomm SD695 Firmware: affected versions not specified
• Qualcomm SD750G Firmware: affected versions not specified
• Qualcomm SD765 Firmware: affected versions not specified
• Qualcomm SD765G Firmware: affected versions not specified
• Qualcomm SD768G Firmware: affected versions not specified
• Qualcomm SD778G Firmware: affected versions not specified
• Qualcomm SD855 Firmware: affected versions not specified
• and 30 more

Published 2022-06-14. Last modified 2026-06-17.