High severity · published Jul 13, 2021
CVE-2021-1907
Possible buffer overflow due to lack of length check in BA request in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial…
7.5
CVSS
0.6%
EPSS
No
On KEV
Description
Possible buffer overflow due to lack of length check in BA request in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 48% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AF
Apq8053 Firmware · Qualcomm
All versions, or not specified · source: NVD
CF
Csrb31024 Firmware · Qualcomm
All versions, or not specified · source: NVD
MF
Msm8953 Firmware · Qualcomm
All versions, or not specified · source: NVD
QF
Qca6175a Firmware · Qualcomm
All versions, or not specified · source: NVD
QF
Qca6390 Firmware · Qualcomm
All versions, or not specified · source: NVD
QF
Qca6391 Firmware · Qualcomm
All versions, or not specified · source: NVD
QF
Qca6426 Firmware · Qualcomm
All versions, or not specified · source: NVD
QF
Qca6436 Firmware · Qualcomm
All versions, or not specified · source: NVD
QF
Qca6564a Firmware · Qualcomm
All versions, or not specified · source: NVD
QF
Qca6564au Firmware · Qualcomm
All versions, or not specified · source: NVD
QF
Qca6574 Firmware · Qualcomm
All versions, or not specified · source: NVD
QF
Qca6574a Firmware · Qualcomm
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-1907
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-1907
Patch
https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin
More from Apq8053 Firmware
7.8
CVE-2022-22071
Qualcomm Multiple Chipsets Use-After-Free Vulnerability
7.8
CVE-2020-11261
Qualcomm Multiple Chipsets Improper Input Validation Vulnerability
7.8
CVE-2021-1905
Qualcomm Multiple Chipsets Use-After-Free Vulnerability
5.5
CVE-2021-1906
Qualcomm Multiple Chipsets Detection of Error Condition Without Action Vulnerability
9.8
CVE-2022-25687
memory corruption in video due to buffer overflow while parsing asf clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon…