peter bassill · operator
$ cve CVE-2021-1906 JSON

CVE-2021-1906 KEV

6.2
MEDIUM · CVSS 3.1 · EPSS 0.5% (pctl 42)

Patch first

On CISA KEV — known exploited in the wild, due 2021-11-17.

Description

Improper handling of address deregistration on failure can lead to new GPU address allocation failure. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Scoring

CVSS6.2 (MEDIUM, v3.1)
VectorCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS0.52% — more likely to be exploited than 42% of all CVEs
On CISA KEVyes — remediate by 2021-11-17
Public exploitnone known
Published2021-05-07
Last modified2026-06-17

CISA KEV

NameQualcomm Multiple Chipsets Detection of Error Condition Without Action Vulnerability
Added2021-11-03
Due2021-11-17
Vendor / productQualcomm / Multiple Chipsets
Ransomware usenone reported

Affected (40)

VendorProduct
qualcommapq8009
qualcommapq8009 firmware
qualcommapq8009w
qualcommapq8009w firmware
qualcommapq8017
qualcommapq8017 firmware
qualcommapq8053
qualcommapq8053 firmware
qualcommapq8064au
qualcommapq8064au firmware
qualcommapq8096au
qualcommapq8096au firmware
qualcommaqt1000
qualcommaqt1000 firmware
qualcommar8031
qualcommar8031 firmware
qualcommar8035
qualcommar8035 firmware
qualcommar8151
qualcommar8151 firmware
qualcommcsra6620
qualcommcsra6620 firmware
qualcommcsra6640
qualcommcsra6640 firmware
qualcommcsrb31024
qualcommcsrb31024 firmware
qualcommfsm10055
qualcommfsm10055 firmware
qualcommfsm10056
qualcommfsm10056 firmware
qualcommmdm9150
qualcommmdm9150 firmware
qualcommmdm9206
qualcommmdm9206 firmware
qualcommmdm9250
qualcommmdm9250 firmware
qualcommmdm9607
qualcommmdm9607 firmware
qualcommmdm9626
qualcommmdm9626 firmware

References

→ the Explorer  ·  watch your stack  ·  NVD