PT-2022-10438 · Qualcomm · Synx Driver

Published 2022-06-14 · Updated 2022-06-23 · CVE-2021-35121

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Synx driver in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile (affected versions not specified)

Description The issue arises from an improper use of an array index to lock and unlock a mutex, leading to a Use After Free condition. This condition occurs within the Synx driver, affecting various Snapdragon products, including Compute, Connectivity, Industrial IOT, and Mobile.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Validation of Array Index

Weakness Enumeration

CWE-129

Related Identifiers

CVE-2021-35121

Affected Products

Synx Driver

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2021-35121 · Security Note
• https://qualcomm.com/company/product-security/bulletins/june-2022-bulletin · Vendor Advisory
• https://t.me/cibsecurity/44386 · Telegram Post