High severity · published Sep 8, 2021
CVE-2021-1914
Loop with unreachable exit condition may occur due to improper handling of unsupported input in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…
7.5
CVSS
0.6%
EPSS
No
On KEV
Description
Loop with unreachable exit condition may occur due to improper handling of unsupported input in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 48% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AF
Apq8009 Firmware · Qualcomm
All versions, or not specified · source: NVD
AF
Apq8009w Firmware · Qualcomm
All versions, or not specified · source: NVD
AF
Apq8017 Firmware · Qualcomm
All versions, or not specified · source: NVD
AF
Apq8037 Firmware · Qualcomm
All versions, or not specified · source: NVD
AF
Apq8053 Firmware · Qualcomm
All versions, or not specified · source: NVD
AF
Apq8096au Firmware · Qualcomm
All versions, or not specified · source: NVD
AF
Aqt1000 Firmware · Qualcomm
All versions, or not specified · source: NVD
CF
Csr6030 Firmware · Qualcomm
All versions, or not specified · source: NVD
CF
Csrb31024 Firmware · Qualcomm
All versions, or not specified · source: NVD
MF
Mdm8207 Firmware · Qualcomm
All versions, or not specified · source: NVD
MF
Mdm9150 Firmware · Qualcomm
All versions, or not specified · source: NVD
MF
Mdm9205 Firmware · Qualcomm
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-1914
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-1914
Vendor Advisory
https://www.qualcomm.com/company/product-security/bulletins/august-2021-bulletin
More from Apq8009 Firmware
7.8
CVE-2020-11261
Qualcomm Multiple Chipsets Improper Input Validation Vulnerability
7.8
CVE-2021-1905
Qualcomm Multiple Chipsets Use-After-Free Vulnerability
5.5
CVE-2021-1906
Qualcomm Multiple Chipsets Detection of Error Condition Without Action Vulnerability
9.8
CVE-2022-40510
Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder
9.8
CVE-2022-40537
Memory corruption in Bluetooth HOST while processing the AVRC_PDU_GET_PLAYER_APP_VALUE_TEXT AVRCP response