CVE-2021-1901

Medium

Description

Possible buffer over-read due to lack of length check while flashing meta images in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

SeverityMedium
CVSS4.6
Exploit probability—
ProductQualcomm Apq8009 Firmware
PublishedJul 13, 2021
First seenJul 13, 2021

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
qualcomm apq8009_firmwareNo range specified—
qualcomm apq8053_firmwareNo range specified—
qualcomm aqt1000_firmwareNo range specified—
qualcomm mdm9206_firmwareNo range specified—
qualcomm qca6420_firmwareNo range specified—
qualcomm qca6430_firmwareNo range specified—
qualcomm qca9367_firmwareNo range specified—
qualcomm qca9377_firmwareNo range specified—
qualcomm qualcomm215_firmwareNo range specified—
qualcomm sd_675_firmwareNo range specified—
qualcomm sd205_firmwareNo range specified—
qualcomm sd210_firmwareNo range specified—
qualcomm sd675_firmwareNo range specified—
qualcomm sd678_firmwareNo range specified—
qualcomm sd720g_firmwareNo range specified—
qualcomm sd730_firmwareNo range specified—
qualcomm sd855_firmwareNo range specified—
qualcomm sda429w_firmwareNo range specified—
qualcomm sdx50m_firmwareNo range specified—
qualcomm sdx55_firmwareNo range specified—
qualcomm sdx55m_firmwareNo range specified—
qualcomm sm6250_firmwareNo range specified—
qualcomm wcd9326_firmwareNo range specified—
qualcomm wcd9330_firmwareNo range specified—
qualcomm wcd9340_firmwareNo range specified—
qualcomm wcd9341_firmwareNo range specified—
qualcomm wcd9370_firmwareNo range specified—
qualcomm wcd9375_firmwareNo range specified—
qualcomm wcd9380_firmwareNo range specified—
qualcomm wcn3610_firmwareNo range specified—
qualcomm wcn3615_firmwareNo range specified—
qualcomm wcn3620_firmwareNo range specified—
qualcomm wcn3660b_firmwareNo range specified—
qualcomm wcn3680_firmwareNo range specified—
qualcomm wcn3680b_firmwareNo range specified—
qualcomm wcn3950_firmwareNo range specified—
qualcomm wcn3980_firmwareNo range specified—
qualcomm wcn3988_firmwareNo range specified—
qualcomm wcn3991_firmwareNo range specified—
qualcomm wcn3998_firmwareNo range specified—
qualcomm wsa8810_firmwareNo range specified—
qualcomm wsa8815_firmwareNo range specified—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2021-1901 · Qualcomm Apq8009 Firmware · Dark Radar