CVE-2021-35068 : Security Advisory and Response
Learn about CVE-2021-35068, a high-impact vulnerability in Qualcomm products such as Snapdragon Auto, Compute, and more. Discover its impact, affected systems, and mitigation steps.
A vulnerability has been identified in Qualcomm products, including Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, and more. This vulnerability could lead to a NULL pointer dereference due to a lack of null check while freeing the device information buffer in the Bluetooth HFP protocol.
Understanding CVE-2021-35068
This section will provide insights into the nature and impact of the CVE-2021-35068 vulnerability.
What is CVE-2021-35068?
The CVE-2021-35068 vulnerability stems from a lack of null check during the freeing of the device information buffer in the Bluetooth HFP protocol within Qualcomm products.
The Impact of CVE-2021-35068
The impact of CVE-2021-35068 is high, as it can result in a NULL pointer dereference in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, and other Qualcomm products.
Technical Details of CVE-2021-35068
In this section, we will delve into the technical aspects of the CVE-2021-35068 vulnerability.
Vulnerability Description
The vulnerability arises from the absence of a null check while releasing the device information buffer in the Bluetooth HFP protocol.
Affected Systems and Versions
Several Qualcomm products are affected, including Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, and Snapdragon Wearables.
Exploitation Mechanism
The exploitation of this vulnerability can occur locally with low attack complexity, leading to high impacts on confidentiality, integrity, and availability.
Mitigation and Prevention
To mitigate the risks associated with CVE-2021-35068, immediate steps and long-term security practices should be implemented.
Immediate Steps to Take
It is crucial to apply security patches and updates provided by Qualcomm promptly to address the CVE-2021-35068 vulnerability.
Long-Term Security Practices
Practicing secure coding standards, conducting regular security audits, and prioritizing software security can help prevent similar vulnerabilities in the future.
Patching and Updates
Regularly monitor for security advisories from Qualcomm and ensure timely application of patches to safeguard the systems against CVE-2021-35068.