Lucene search

[email protected]CVE-2021-1892

HistoryApr 07, 2021 - 8:15 a.m.

CVE-2021-1892

2021-04-0708:15:14

CWE-787

[email protected]

web.nvd.nist.gov

cve-2021-1892

memory corruption

input validation

snapdragon

compute

connectivity

consumer electronics

wired infrastructure

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

8.4 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.9 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

Memory corruption due to improper input validation while processing IO control which is nonstandard in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Wired Infrastructure and Networking

Affected configurations

NVD

Node

qualcommaqt1000Match-

AND

qualcommaqt1000_firmwareMatch-

Node

qualcommpm8005Match-

AND

qualcommpm8005_firmwareMatch-

Node

qualcommpm855Match-

AND

qualcommpm855_firmwareMatch-

Node

qualcommpm855pMatch-

AND

qualcommpm855p_firmwareMatch-

Node

qualcommpm8998Match-

AND

qualcommpm8998_firmwareMatch-

Node

qualcommpmi8998Match-

AND

qualcommpmi8998_firmwareMatch-

Node

qualcommqat3550Match-

AND

qualcommqat3550_firmwareMatch-

Node

qualcommqca1062Match-

AND

qualcommqca1062_firmwareMatch-

Node

qualcommqca1064_firmwareMatch-

AND

qualcommqca1064Match-

Node

qualcommqca2066_firmwareMatch-

AND

qualcommqca2066Match-

Node

qualcommqca6164_firmwareMatch-

AND

qualcommqca6164Match-

Node

qualcommqca6174_firmwareMatch-

AND

qualcommqca6174Match-

Node

qualcommqca6174a_firmwareMatch-

AND

qualcommqca6174aMatch-

Node

qualcommqca6310_firmwareMatch-

AND

qualcommqca6310Match-

Node

qualcommqca6335_firmwareMatch-

AND

qualcommqca6335Match-

Node

qualcommqca6391_firmwareMatch-

AND

qualcommqca6391Match-

Node

qualcommqca6420_firmwareMatch-

AND

qualcommqca6420Match-

Node

qualcommqca6430_firmwareMatch-

AND

qualcommqca6430Match-

Node

qualcommqca6595au_firmwareMatch-

AND

qualcommqca6595auMatch-

Node

qualcommqca9377_firmwareMatch-

AND

qualcommqca9377Match-

Node

qualcommqcn7605_firmwareMatch-

AND

qualcommqcn7605Match-

Node

qualcommqcn7606_firmwareMatch-

AND

qualcommqcn7606Match-

Node

qualcommqet4100_firmwareMatch-

AND

qualcommqet4100Match-

Node

qualcommqfe2081fc_firmwareMatch-

AND

qualcommqfe2081fcMatch-

Node

qualcommqfe2082fc_firmwareMatch-

AND

qualcommqfe2082fcMatch-

Node

qualcommqfe3100_firmwareMatch-

AND

qualcommqfe3100Match-

Node

qualcommqfe3440fc_firmwareMatch-

AND

qualcommqfe3440fcMatch-

Node

qualcommqfe4455fc_firmwareMatch-

AND

qualcommqfe4455fcMatch-

Node

qualcommqln1035bd_firmwareMatch-

AND

qualcommqln1035bdMatch-

Node

qualcommsd8c_firmwareMatch-

AND

qualcommsd8cMatch-

Node

qualcommsd8cx_firmwareMatch-

AND

qualcommsd8cxMatch-

Node

qualcommsd835_firmwareMatch-

AND

qualcommsd835Match-

Node

qualcommsd845_firmwareMatch-

AND

qualcommsd845Match-

Node

qualcommsd850_firmwareMatch-

AND

qualcommsd850Match-

Node

qualcommsdr8150_firmwareMatch-

AND

qualcommsdr8150Match-

Node

qualcommsmb1350_firmwareMatch-

AND

qualcommsmb1350Match-

Node

qualcommsmb1351_firmwareMatch-

AND

qualcommsmb1351Match-

Node

qualcommsmb1380_firmwareMatch-

AND

qualcommsmb1380Match-

Node

qualcommsmb1381_firmwareMatch-

AND

qualcommsmb1381Match-

Node

qualcommsmb1390_firmwareMatch-

AND

qualcommsmb1390Match-

Node

qualcommsmb2351_firmwareMatch-

AND

qualcommsmb2351Match-

Node

qualcommwcd9335_firmwareMatch-

AND

qualcommwcd9335Match-

Node

qualcommwcd9340_firmwareMatch-

AND

qualcommwcd9340Match-

Node

qualcommwcd9341_firmwareMatch-

AND

qualcommwcd9341Match-

Node

qualcommwcn3990_firmwareMatch-

AND

qualcommwcn3990Match-

Node

qualcommwcn3998_firmwareMatch-

AND

qualcommwcn3998Match-

Node

qualcommwcn6850_firmwareMatch-

AND

qualcommwcn6850Match-

Node

qualcommwcn6851_firmwareMatch-

AND

qualcommwcn6851Match-

Node

qualcommwcn6855_firmwareMatch-

AND

qualcommwcn6855Match-

Node

qualcommwcn6856_firmwareMatch-

AND

qualcommwcn6856Match-

Node

qualcommwgr7640_firmwareMatch-

AND

qualcommwgr7640Match-

Node

qualcommwsa8810_firmwareMatch-

AND

qualcommwsa8810Match-

Node

qualcommwsa8815_firmwareMatch-

AND

qualcommwsa8815Match-

Node

qualcommwtr5975_firmwareMatch-

AND

qualcommwtr5975Match-

CPENameOperatorVersion
qualcomm:aqt1000_firmwarequalcomm aqt1000 firmwareeq-

CPE	Name	Operator	Version
qualcomm:aqt1000_firmware	qualcomm aqt1000 firmware	eq	-

CNA Affected

[
  {
    "product": "Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Wired Infrastructure and Networking",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "AQT1000, PM8005, PM855, PM855P, PM8998, PMI8998, QAT3550, QCA1062, QCA1064, QCA2066, QCA6164, QCA6174, QCA6174A, QCA6310, QCA6335, QCA6391, QCA6420, QCA6430, QCA6595AU, QCA9377, QCN7605, QCN7606, QET4100, QFE2081FC, QFE2082FC, QFE3100, QFE3440FC, QFE4455FC, QLN1035BD, SD 8C, SD 8CX, SD835, SD845, SD850, SDR8150, SMB1350, SMB1351, SMB1380, SMB1381, SMB1390, SMB2351, WCD9335, WCD9340, WCD9341, WCN3990, WCN3998, WCN6850, WCN6851, WCN6855, WCN6856, WGR7640, WSA8810, WSA8815, WTR5975"
      }
    ]
  }
]

References

www.qualcomm.com/company/product-security/bulletins/april-2021-bulletin

Social References

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

8.4 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.9 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

Related for CVE-2021-1892

nvd1 prion1 cvelist1