CVE-2021-35090

Possible hypervisor memory corruption due to TOC TOU race condition when updating address mappings in Snapdragon Auto, Snapdragon Compute, Snapdragon…

Critical · published June 14, 2022

CVSS v3.1
9.3
EPSS
0%
Percentile
1.7
In the wild
Unconfirmed
What it is

🔥 A sneaky race condition in the hypervisor could lead to devastating memory corruption on a host of Snapdragon devices! ⚡ Think of this like a construction site where workers are updating blueprints while others are trying to build on top of them — if the plans change mid-operation, everything could come crashing down! If an attacker successfully exploits this flaw, they could gain unauthorized access to sensitive memory areas, potentially compromising the entire system's integrity. This could lead to data leaks, unauthorized operations, or even system crashes — a shocking scenario for any device running Snapdragon technology!

Put simply

Think of this like a construction site where workers are updating blueprints while others are trying to build on top of them — if the plans change mid-operation, everything could come crashing down! This vulnerability arises from a Time Of Check to Time Of Use (TOC TOU) race condition that occurs when updating address mappings, which can lead to improper memory handling within the hypervisor.

What to do

If an attacker successfully exploits this flaw, they could gain unauthorized access to sensitive memory areas, potentially compromising the entire system's integrity. This could lead to data leaks, unauthorized operations, or even system crashes — a shocking scenario for any device running Snapdragon technology! To safeguard against this vulnerability, update the affected Snapdragon components to the latest versions released by Qualcomm immediately. Regularly monitor for security patches and implement robust access controls to mitigate any potential risks. You've got this! Stay proactive and your systems will be well-protected! 🛡️

The record
Technical detail
CVSS v3.1
9.3 · CRITICAL
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00119 · 1.7th percentile
Published
2022-06-14T09:51Z
EPSS history
Timeline
  • 14 JUN 09:51Z
    Possible hypervisor memory corruption due to TOC TOU race condition when updating address mappings in Snapdragon Auto, Snapdragon Compute, Snapdragon…
    cvelistv5