High severity · published Apr 7, 2021
CVE-2021-1892
Memory corruption due to improper input validation while processing IO control which is nonstandard in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics…
7.8
CVSS
0.2%
EPSS
No
On KEV
Description
Memory corruption due to improper input validation while processing IO control which is nonstandard in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Wired Infrastructure and Networking
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 6% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AF
Aqt1000 Firmware · Qualcomm
All versions, or not specified · source: NVD
PF
Pm8005 Firmware · Qualcomm
All versions, or not specified · source: NVD
PF
Pm855 Firmware · Qualcomm
All versions, or not specified · source: NVD
PF
Pm855p Firmware · Qualcomm
All versions, or not specified · source: NVD
PF
Pm8998 Firmware · Qualcomm
All versions, or not specified · source: NVD
PF
Pmi8998 Firmware · Qualcomm
All versions, or not specified · source: NVD
QF
Qat3550 Firmware · Qualcomm
All versions, or not specified · source: NVD
QF
Qca1062 Firmware · Qualcomm
All versions, or not specified · source: NVD
QF
Qca1064 Firmware · Qualcomm
All versions, or not specified · source: NVD
QF
Qca2066 Firmware · Qualcomm
All versions, or not specified · source: NVD
QF
Qca6164 Firmware · Qualcomm
All versions, or not specified · source: NVD
QF
Qca6174 Firmware · Qualcomm
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-1892
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-1892
Vendor Advisory
https://www.qualcomm.com/company/product-security/bulletins/april-2021-bulletin
More from Aqt1000 Firmware
8.6
CVE-2025-21479
Incorrect Authorization in Graphics
8.6
CVE-2025-21480
Incorrect Authorization in Graphics Windows
7.8
CVE-2023-33107
Integer Overflow or Wraparound in Graphics Linux
7.8
CVE-2023-33063
Use After Free in DSP Services
7.8
CVE-2020-11261
Qualcomm Multiple Chipsets Improper Input Validation Vulnerability