CVE-2021-1961

Possible buffer overflow due to lack of offset length check while updating the buffer value in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Affected

Qualcomm, Inc. · Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CVSS v3.1 NVD

6.7 MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

4.6 MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.39% chance of exploitation in the next 30 days, 31st percentile

Published

2021-09-09

Updated

2024-08-03

Proof-of-concept exploits (1)

• tamirzb/CVE-2021-1961121★ · 2022-09-07

Security advisories

• https://www.qualcomm.com/company/product-security/bulletins/september-2021-bulletin

References

• CVE Record
• NVD entry

Related

• CVE-2017-13253
• CVE-2018-9411
• CVE-2018-9539
• CVE-2019-14040
• CVE-2019-14041