CVEvulnerability
CVE-2021-1969
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2021-10-20
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.2 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-20
Description
Improper validation of kernel buffer address while copying information back to user buffer can lead to kernel memory information exposure to user space in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Affected configurations
• qualcomm aqt1000 firmware
• qualcomm ar8031 firmware
• qualcomm ar8035 firmware
• qualcomm csra6620 firmware
• qualcomm csra6640 firmware
• qualcomm fsm10055 firmware
• qualcomm fsm10056 firmware
• qualcomm mdm9150 firmware
• qualcomm qca6391 firmware
• qualcomm qca6420 firmware
• qualcomm qca6430 firmware
• qualcomm qca6574 firmware
• qualcomm qca6574a firmware
• qualcomm qca6574au firmware
• qualcomm qca6584au firmware
• qualcomm qca6595 firmware
• qualcomm qca6595au firmware
• qualcomm qca6696 firmware
• qualcomm qca8337 firmware
• qualcomm qcm6125 firmware
• qualcomm qcs405 firmware
• qualcomm qcs410 firmware
• qualcomm qcs610 firmware
• qualcomm qcs6125 firmware
• qualcomm sa6145p firmware
• qualcomm sa6150p firmware
• qualcomm sa6155 firmware
• qualcomm sa6155p firmware
• qualcomm sa8145p firmware
• qualcomm sa8150p firmware
• qualcomm sa8155 firmware
• qualcomm sa8155p firmware
• qualcomm sa8195p firmware
• qualcomm sd 675 firmware
• qualcomm sd 8c firmware
• qualcomm sd 8cx firmware
• qualcomm sd665 firmware
• qualcomm sd675 firmware
• qualcomm sd678 firmware
• qualcomm sd720g firmware
• qualcomm sd855 firmware
• qualcomm sda429w firmware
• qualcomm sdx55 firmware
• qualcomm sdx55m firmware
• qualcomm sm6250 firmware
• qualcomm wcd9335 firmware
• qualcomm wcd9340 firmware
• qualcomm wcd9341 firmware
• qualcomm wcd9370 firmware
• qualcomm wcd9375 firmware
• qualcomm wcd9380 firmware
• qualcomm wcn3610 firmware
• qualcomm wcn3620 firmware
• qualcomm wcn3660b firmware
• qualcomm wcn3950 firmware
• qualcomm wcn3980 firmware
• qualcomm wcn3988 firmware
• qualcomm wcn3991 firmware
• qualcomm wcn3998 firmware
• qualcomm wcn3999 firmware
… and 2 more
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://packetstormsecurity.com/files/172856/Qualcomm-NPU-Use-After-Free-Information-Leak.html packetstormsecurity.com
- https://www.qualcomm.com/company/product-security/bulletins/october-2021-bulletin Patch, Vendor Advisory
- http://packetstormsecurity.com/files/172856/Qualcomm-NPU-Use-After-Free-Information-Leak.html packetstormsecurity.com
- https://www.qualcomm.com/company/product-security/bulletins/october-2021-bulletin Patch, Vendor Advisory