CVE-2021-35134: Qualcomm QCA6391 Firmware

High severity, CVSS 8.4. EPSS: 0.1% chance of exploitation in the next 30 days.

Due to insufficient validation of ELF headers, an Incorrect Calculation of Buffer Size can occur in Boot leading to memory corruption in Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

Affected products

• Qualcomm QCA6391 Firmware: affected versions not specified
• Qualcomm QCM6490 Firmware: affected versions not specified
• Qualcomm QCS6490 Firmware: affected versions not specified
• Qualcomm QSM8350 Firmware: affected versions not specified
• Qualcomm SD778G Firmware: affected versions not specified
• Qualcomm SD780G Firmware: affected versions not specified
• Qualcomm SD888 5g Firmware: affected versions not specified
• Qualcomm SD888 Firmware: affected versions not specified
• Qualcomm Sd 8 GEN1 5g Firmware: affected versions not specified
• Qualcomm SM7315 Firmware: affected versions not specified
• Qualcomm SM7325P Firmware: affected versions not specified
• Qualcomm SM7450 Firmware: affected versions not specified
• Qualcomm SM8475 Firmware: affected versions not specified
• Qualcomm SM8475P Firmware: affected versions not specified
• Qualcomm WCD9341 Firmware: affected versions not specified
• Qualcomm WCD9370 Firmware: affected versions not specified
• Qualcomm WCD9375 Firmware: affected versions not specified
• Qualcomm WCD9380 Firmware: affected versions not specified
• Qualcomm WCD9385 Firmware: affected versions not specified
• Qualcomm WCN6740 Firmware: affected versions not specified
• Qualcomm WCN6750 Firmware: affected versions not specified
• Qualcomm WCN6850 Firmware: affected versions not specified
• Qualcomm WCN6851 Firmware: affected versions not specified
• Qualcomm WCN6855 Firmware: affected versions not specified
• Qualcomm WCN6856 Firmware: affected versions not specified
• and 5 more

Published 2022-09-02. Last modified 2026-06-17.