peter bassill · operator
$ cve CVE-2021-1905 JSON

CVE-2021-1905 KEV

8.4
HIGH · CVSS 3.1 · EPSS 1.5% (pctl 74)

Patch first

On CISA KEV — known exploited in the wild, due 2022-05-03.

Description

Possible use after free due to improper handling of memory mapping of multiple processes simultaneously. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Scoring

CVSS8.4 (HIGH, v3.1)
VectorCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS1.54% — more likely to be exploited than 74% of all CVEs
WeaknessCWE-416
On CISA KEVyes — remediate by 2022-05-03
Public exploitnone known
Published2021-05-07
Last modified2026-06-17

CISA KEV

NameQualcomm Multiple Chipsets Use-After-Free Vulnerability
Added2021-11-03
Due2022-05-03
Vendor / productQualcomm / Multiple Chipsets
Ransomware usenone reported

Affected (40)

VendorProduct
qualcommapq8009
qualcommapq8009 firmware
qualcommapq8009w
qualcommapq8009w firmware
qualcommapq8017
qualcommapq8017 firmware
qualcommapq8053
qualcommapq8053 firmware
qualcommapq8064au
qualcommapq8064au firmware
qualcommapq8096au
qualcommapq8096au firmware
qualcommaqt1000
qualcommaqt1000 firmware
qualcommar8031
qualcommar8031 firmware
qualcommar8035
qualcommar8035 firmware
qualcommar8151
qualcommar8151 firmware
qualcommcsra6620
qualcommcsra6620 firmware
qualcommcsra6640
qualcommcsra6640 firmware
qualcommfsm10055
qualcommfsm10055 firmware
qualcommfsm10056
qualcommfsm10056 firmware
qualcommmdm9206
qualcommmdm9206 firmware
qualcommmdm9607
qualcommmdm9607 firmware
qualcommmdm9626
qualcommmdm9626 firmware
qualcommmdm9628
qualcommmdm9628 firmware
qualcommmdm9650
qualcommmdm9650 firmware
qualcommmsm8909w
qualcommmsm8909w firmware

References

→ the Explorer  ·  watch your stack  ·  NVD