Login Request a demo
Critical severity · published Jul 13, 2021
CVE-2021-1965
Possible buffer overflow due to lack of parameter length check during MBSSID scan IE parse in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile,…
9.8
CVSS
3%
EPSS
No
On KEV
Description
Possible buffer overflow due to lack of parameter length check during MBSSID scan IE parse in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)3.0% · higher than 87% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AF
Aqt1000 Firmware · Qualcomm
All versions, or not specified · source: NVD
AF
Ar9380 Firmware · Qualcomm
All versions, or not specified · source: NVD
CF
Csr8811 Firmware · Qualcomm
All versions, or not specified · source: NVD
IF
Ipq4018 Firmware · Qualcomm
All versions, or not specified · source: NVD
IF
Ipq4019 Firmware · Qualcomm
All versions, or not specified · source: NVD
IF
Ipq4028 Firmware · Qualcomm
All versions, or not specified · source: NVD
IF
Ipq4029 Firmware · Qualcomm
All versions, or not specified · source: NVD
IF
Ipq5010 Firmware · Qualcomm
All versions, or not specified · source: NVD
IF
Ipq5018 Firmware · Qualcomm
All versions, or not specified · source: NVD
IF
Ipq5028 Firmware · Qualcomm
All versions, or not specified · source: NVD
IF
Ipq6000 Firmware · Qualcomm
All versions, or not specified · source: NVD
IF
Ipq6005 Firmware · Qualcomm
All versions, or not specified · source: NVD
Affected product
AF
Aqt1000 Firmware
Qualcomm
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-1965
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-1965
Patch
https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin
More from Aqt1000 Firmware
8.6
CVE-2025-21479
Incorrect Authorization in Graphics
8.6
CVE-2025-21480
Incorrect Authorization in Graphics Windows
7.8
CVE-2023-33107
Integer Overflow or Wraparound in Graphics Linux
7.8
CVE-2023-33063
Use After Free in DSP Services
7.8
CVE-2020-11261
Qualcomm Multiple Chipsets Improper Input Validation Vulnerability