CVE-2021-35116: Qualcomm APQ8009 Firmware

High severity, CVSS 7.1. EPSS: 0.2% chance of exploitation in the next 30 days.

APK can load a crafted model into the CDSP which can lead to a compromise of CDSP and other APK`s data executing there in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Affected products

• Qualcomm APQ8009 Firmware: affected versions not specified
• Qualcomm APQ8009W Firmware: affected versions not specified
• Qualcomm APQ8096AU Firmware: affected versions not specified
• Qualcomm AQT1000 Firmware: affected versions not specified
• Qualcomm CSRB31024 Firmware: affected versions not specified
• Qualcomm MDM9607 Firmware: affected versions not specified
• Qualcomm MDM9626 Firmware: affected versions not specified
• Qualcomm MDM9628 Firmware: affected versions not specified
• Qualcomm MDM9640 Firmware: affected versions not specified
• Qualcomm MSM8909W Firmware: affected versions not specified
• Qualcomm MSM8937 Firmware: affected versions not specified
• Qualcomm MSM8996AU Firmware: affected versions not specified
• Qualcomm PM8937 Firmware: affected versions not specified
• Qualcomm QCA6174A Firmware: affected versions not specified
• Qualcomm QCA6310 Firmware: affected versions not specified
• Qualcomm QCA6320 Firmware: affected versions not specified
• Qualcomm QCA6390 Firmware: affected versions not specified
• Qualcomm QCA6391 Firmware: affected versions not specified
• Qualcomm QCA6420 Firmware: affected versions not specified
• Qualcomm QCA6430 Firmware: affected versions not specified
• Qualcomm QCA6564A Firmware: affected versions not specified
• Qualcomm QCA6564AU Firmware: affected versions not specified
• Qualcomm QCA6574 Firmware: affected versions not specified
• Qualcomm QCA6574A Firmware: affected versions not specified
• Qualcomm QCA6574AU Firmware: affected versions not specified
• and 88 more

Published 2022-06-14. Last modified 2026-06-17.