CVE-2021-35096 — Allocation of Resources Without Limits or Throttling in Google Android

CWE-770 — Allocation of Resources Without Limits or Throttling3 documents3 sources

Severity

7.5HIGHNVD

EPSS

0.4%

top 41.21%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Google Android

Timeline

PublishedJun 14

Latest updateJun 15

Description

Improper memory allocation during counter check DLM handling can lead to denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages1 packages

▶googlegoogle/android

🔴Vulnerability Details

GHSA

GHSA-569h-pqf5-wpr7: Improper memory allocation during counter check DLM handling can lead to denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connecti↗2022-06-15

▶

📋Vendor Advisories

Android

CVE-2021-35096: Closed-source component↗2022-05-01

▶