CVE Feed

    Dashboard / CVE / CVE-2021-1899

    CVE-2021-1899

    Possible buffer over read due to lack of length check while flashing meta images in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

    Published:Jul 13, 2021
    Last Modified:Nov 21, 2024
    EPS:Jul 13, 2021
    EPSS Score:0.00046
    CVSS Score:4.6

    Affected Products

    Vendor
    Qualcomm
    Product
    Apq8009w
    Vendor
    Qualcomm
    Product
    Apq8009w Firmware
    Vendor
    Qualcomm
    Product
    Aqt1000
    Vendor
    Qualcomm
    Product
    Aqt1000 Firmware
    Vendor
    Qualcomm
    Product
    Msm8909w
    Vendor
    Qualcomm
    Product
    Msm8909w Firmware
    Vendor
    Qualcomm
    Product
    Qca4020
    Vendor
    Qualcomm
    Product
    Qca4020 Firmware
    Vendor
    Qualcomm
    Product
    Qca6174a
    Vendor
    Qualcomm
    Product
    Qca6174a Firmware
    Vendor
    Qualcomm
    Product
    Qca6420
    Vendor
    Qualcomm
    Product
    Qca6420 Firmware
    Vendor
    Qualcomm
    Product
    Qca6430
    Vendor
    Qualcomm
    Product
    Qca6430 Firmware
    Vendor
    Qualcomm
    Product
    Qca9379
    Vendor
    Qualcomm
    Product
    Qca9379 Firmware
    Vendor
    Qualcomm
    Product
    Qualcomm215
    Vendor
    Qualcomm
    Product
    Qualcomm215 Firmware
    Vendor
    Qualcomm
    Product
    Sd205
    Vendor
    Qualcomm
    Product
    Sd205 Firmware
    Vendor
    Qualcomm
    Product
    Sd210
    Vendor
    Qualcomm
    Product
    Sd210 Firmware
    Vendor
    Qualcomm
    Product
    Sd675
    Vendor
    Qualcomm
    Product
    Sd675 Firmware
    Vendor
    Qualcomm
    Product
    Sd678
    Vendor
    Qualcomm
    Product
    Sd678 Firmware
    Vendor
    Qualcomm
    Product
    Sd720g
    Vendor
    Qualcomm
    Product
    Sd720g Firmware
    Vendor
    Qualcomm
    Product
    Sd730
    Vendor
    Qualcomm
    Product
    Sd730 Firmware
    Vendor
    Qualcomm
    Product
    Sd855
    Vendor
    Qualcomm
    Product
    Sd855 Firmware
    Vendor
    Qualcomm
    Product
    Sd 675
    Vendor
    Qualcomm
    Product
    Sd 675 Firmware
    Vendor
    Qualcomm
    Product
    Sda429w
    Vendor
    Qualcomm
    Product
    Sda429w Firmware
    Vendor
    Qualcomm
    Product
    Sdm429w
    Vendor
    Qualcomm
    Product
    Sdm429w Firmware
    Vendor
    Qualcomm
    Product
    Sdx50m
    Vendor
    Qualcomm
    Product
    Sdx50m Firmware
    Vendor
    Qualcomm
    Product
    Sdx55
    Vendor
    Qualcomm
    Product
    Sdx55 Firmware
    Vendor
    Qualcomm
    Product
    Sdx55m
    Vendor
    Qualcomm
    Product
    Sdx55m Firmware
    Vendor
    Qualcomm
    Product
    Sm6250
    Vendor
    Qualcomm
    Product
    Sm6250 Firmware
    Vendor
    Qualcomm
    Product
    Wcd9326
    Vendor
    Qualcomm
    Product
    Wcd9326 Firmware
    Vendor
    Qualcomm
    Product
    Wcd9341
    Vendor
    Qualcomm
    Product
    Wcd9341 Firmware
    Vendor
    Qualcomm
    Product
    Wcd9370
    Vendor
    Qualcomm
    Product
    Wcd9370 Firmware
    Vendor
    Qualcomm
    Product
    Wcd9375
    Vendor
    Qualcomm
    Product
    Wcd9375 Firmware
    Vendor
    Qualcomm
    Product
    Wcd9380
    Vendor
    Qualcomm
    Product
    Wcd9380 Firmware
    Vendor
    Qualcomm
    Product
    Wcn3610
    Vendor
    Qualcomm
    Product
    Wcn3610 Firmware
    Vendor
    Qualcomm
    Product
    Wcn3615
    Vendor
    Qualcomm
    Product
    Wcn3615 Firmware
    Vendor
    Qualcomm
    Product
    Wcn3620
    Vendor
    Qualcomm
    Product
    Wcn3620 Firmware
    Vendor
    Qualcomm
    Product
    Wcn3660b
    Vendor
    Qualcomm
    Product
    Wcn3660b Firmware
    Vendor
    Qualcomm
    Product
    Wcn3680
    Vendor
    Qualcomm
    Product
    Wcn3680 Firmware
    Vendor
    Qualcomm
    Product
    Wcn3680b
    Vendor
    Qualcomm
    Product
    Wcn3680b Firmware
    Vendor
    Qualcomm
    Product
    Wcn3950
    Vendor
    Qualcomm
    Product
    Wcn3950 Firmware
    Vendor
    Qualcomm
    Product
    Wcn3980
    Vendor
    Qualcomm
    Product
    Wcn3980 Firmware
    Vendor
    Qualcomm
    Product
    Wcn3988
    Vendor
    Qualcomm
    Product
    Wcn3988 Firmware
    Vendor
    Qualcomm
    Product
    Wcn3991
    Vendor
    Qualcomm
    Product
    Wcn3991 Firmware
    Vendor
    Qualcomm
    Product
    Wcn3998
    Vendor
    Qualcomm
    Product
    Wcn3998 Firmware
    Vendor
    Qualcomm
    Product
    Wsa8810
    Vendor
    Qualcomm
    Product
    Wsa8810 Firmware
    Vendor
    Qualcomm
    Product
    Wsa8815
    Vendor
    Qualcomm
    Product
    Wsa8815 Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-125 Out-of-bounds Read

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-540 Overread Buffers

    Related CVEs

    CVE-2022-40510 (CVSS 9.8) — Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder…
    CVE-2022-40537 (CVSS 7.3) — Memory corruption in Bluetooth HOST while processing the AVRC_PDU_GET_PLAYER_APP_VALUE_TEXT AVRCP response.…
    CVE-2022-40515 (CVSS 7.3) — Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms.…
    CVE-2022-33213 (CVSS 7.5) — Memory corruption in modem due to buffer overflow while processing a PPP packet…
    CVE-2022-25705 (CVSS 7.8) — Memory corruption in modem due to integer overflow to buffer overflow while handling APDU response…
    CVE-2022-25694 (CVSS 8.4) — Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM…
    CVE-2022-22075 (CVSS 6.2) — Information Disclosure in Graphics during GPU context switch.…
    CVE-2022-33248 (CVSS 7.8) — Memory corruption in User Identity Module due to integer overflow to buffer overflow when a segement is receiv…
    CVE-2022-33233 (CVSS 7.8) — Memory corruption due to configuration weakness in modem wile sending command to write protected files.…
    CVE-2022-33266 (CVSS 5.9) — Memory corruption in Audio due to integer overflow to buffer overflow while music playback of clips like amr,e…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High