CVE-2021-35111 — Improper Input Validation in Google Android

CWE-20 — Improper Input ValidationCWE-367 — Time-of-check Time-of-use (TOCTOU) Race Condition3 documents3 sources
Severity
5.9MEDIUMNVD
EPSS
0.3%
top 48.02%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Google Android
Timeline
PublishedJun 14
Latest updateJun 15

Description

Improper validation of tag id while RRC sending tag id to MAC can lead to TOCTOU race condition in Snapdragon Connectivity, Snapdragon Mobile

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 2.2 | Impact: 3.6

Affected Packages1 packages

🔴Vulnerability Details

1
GHSA
GHSA-f8p5-mp9v-v67f: Improper validation of tag id while RRC sending tag id to MAC can lead to TOCTOU race condition in Snapdragon Connectivity, Snapdragon Mobile↗2022-06-15
▶

📋Vendor Advisories

1
Android
CVE-2021-35111: Closed-source component↗2022-06-01
▶
CVE-2021-35111 — Improper Input Validation in Google | cvebase