CVE-2021-1940

🗓️ 13 Jul 2021 00:00:00Reported by qualcommType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 132 Views

Use after free due to firmware response in Snapdrago

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2021-1940	23 Nov 202111:50	–	circl
CNNVD	Qualcomm Chipsets 资源管理错误漏洞	5 Jul 202100:00	–	cnnvd
Cvelist	CVE-2021-1940	13 Jul 202100:00	–	cvelist
EUVD	EUVD-2021-7404	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Samsung Mobile	3 Aug 202100:00	–	ncsc
NVD	CVE-2021-1940	13 Jul 202106:15	–	nvd
OSV	ASB-A-184561360	1 Jul 202100:00	–	osv
Prion	Design/Logic Flaw	13 Jul 202106:15	–	prion
Positive Technologies	PT-2021-13689 · Qualcomm · Qualcomm Snapdragon	13 Jul 202100:00	–	ptsecurity
RedhatCVE	CVE-2021-1940	22 May 202521:16	–	redhatcve

NVD

Node

qualcomm aqt1000_firmwareMatch-

AND

qualcomm aqt1000Match-

Node

qualcomm ar8031_firmwareMatch-

AND

qualcomm ar8031Match-

Node

qualcomm ar8035_firmwareMatch-

AND

qualcomm ar8035Match-

Node

qualcomm csra6620_firmwareMatch-

AND

qualcomm csra6620Match-

Node

qualcomm csra6640_firmwareMatch-

AND

qualcomm csra6640Match-

Node

qualcomm fsm10055_firmwareMatch-

AND

qualcomm fsm10055Match-

Node

qualcomm fsm10056_firmwareMatch-

AND

qualcomm fsm10056Match-

Node

qualcomm qca6391_firmwareMatch-

AND

qualcomm qca6391Match-

Node

qualcomm qca6420_firmwareMatch-

AND

qualcomm qca6420Match-

Node

qualcomm qca6430_firmwareMatch-

AND

qualcomm qca6430Match-

Node

qualcomm qca6564_firmwareMatch-

AND

qualcomm qca6564Match-

Node

qualcomm qca6564a_firmwareMatch-

AND

qualcomm qca6564aMatch-

Node

qualcomm qca6564au_firmwareMatch-

AND

qualcomm qca6564auMatch-

Node

qualcomm qca6574_firmwareMatch-

AND

qualcomm qca6574Match-

Node

qualcomm qca6574a_firmwareMatch-

AND

qualcomm qca6574aMatch-

Node

qualcomm qca6574au_firmwareMatch-

AND

qualcomm qca6574auMatch-

Node

qualcomm qca6584au_firmwareMatch-

AND

qualcomm qca6584auMatch-

Node

qualcomm qca6595au_firmwareMatch-

AND

qualcomm qca6595auMatch-

Node

qualcomm qca6696_firmwareMatch-

AND

qualcomm qca6696Match-

Node

qualcomm qca8337_firmwareMatch-

AND

qualcomm qca8337Match-

Node

qualcomm qcm6125_firmwareMatch-

AND

qualcomm qcm6125Match-

Node

qualcomm qcs405_firmwareMatch-

AND

qualcomm qcs405Match-

Node

qualcomm qcs410_firmwareMatch-

AND

qualcomm qcs410Match-

Node

qualcomm qcs610_firmwareMatch-

AND

qualcomm qcs610Match-

Node

qualcomm qcs6125_firmwareMatch-

AND

qualcomm qcs6125Match-

Node

qualcomm sa415m_firmwareMatch-

AND

qualcomm sa415mMatch-

Node

qualcomm sa515m_firmwareMatch-

AND

qualcomm sa515mMatch-

Node

qualcomm sa6145p_firmwareMatch-

AND

qualcomm sa6145pMatch-

Node

qualcomm sa6155_firmwareMatch-

AND

qualcomm sa6155Match-

Node

qualcomm sa6155p_firmwareMatch-

AND

qualcomm sa6155pMatch-

Node

qualcomm sa8155_firmwareMatch-

AND

qualcomm sa8155Match-

Node

qualcomm sa8155p_firmwareMatch-

AND

qualcomm sa8155pMatch-

Node

qualcomm sa8195p_firmwareMatch-

AND

qualcomm sa8195pMatch-

Node

qualcomm sd_675_firmwareMatch-

AND

qualcomm sd_675Match-

Node

qualcomm sd_8c_firmwareMatch-

AND

qualcomm sd_8cMatch-

Node

qualcomm sd_8cx_firmwareMatch-

AND

qualcomm sd_8cxMatch-

Node

qualcomm sd660_firmwareMatch-

AND

qualcomm sd660Match-

Node

qualcomm sd665_firmwareMatch-

AND

qualcomm sd665Match-

Node

qualcomm sd675_firmwareMatch-

AND

qualcomm sd675Match-

Node

qualcomm sd678_firmwareMatch-

AND

qualcomm sd678Match-

Node

qualcomm sd720g_firmwareMatch-

AND

qualcomm sd720gMatch-

Node

qualcomm sd730_firmwareMatch-

AND

qualcomm sd730Match-

Node

qualcomm sd855_firmwareMatch-

AND

qualcomm sd855Match-

Node

qualcomm sda429w_firmwareMatch-

AND

qualcomm sda429wMatch-

Node

qualcomm sdx50m_firmwareMatch-

AND

qualcomm sdx50mMatch-

Node

qualcomm sdx55_firmwareMatch-

AND

qualcomm sdx55Match-

Node

qualcomm sdx55m_firmwareMatch-

AND

qualcomm sdx55mMatch-

Node

qualcomm sm6250_firmwareMatch-

AND

qualcomm sm6250Match-

Node

qualcomm sm6250p_firmwareMatch-

AND

qualcomm sm6250pMatch-

Node

qualcomm wcd9335_firmwareMatch-

AND

qualcomm wcd9335Match-

Node

qualcomm wcd9340_firmwareMatch-

AND

qualcomm wcd9340Match-

Node

qualcomm wcd9341_firmwareMatch-

AND

qualcomm wcd9341Match-

Node

qualcomm wcd9370_firmwareMatch-

AND

qualcomm wcd9370Match-

Node

qualcomm wcd9375_firmwareMatch-

AND

qualcomm wcd9375Match-

Node

qualcomm wcd9380_firmwareMatch-

AND

qualcomm wcd9380Match-

Node

qualcomm wcn3610_firmwareMatch-

AND

qualcomm wcn3610Match-

Node

qualcomm wcn3620_firmwareMatch-

AND

qualcomm wcn3620Match-

Node

qualcomm wcn3660b_firmwareMatch-

AND

qualcomm wcn3660bMatch-

Node

qualcomm wcn3950_firmwareMatch-

AND

qualcomm wcn3950Match-

Node

qualcomm wcn3980_firmwareMatch-

AND

qualcomm wcn3980Match-

Node

qualcomm wcn3988_firmwareMatch-

AND

qualcomm wcn3988Match-

Node

qualcomm wcn3990_firmwareMatch-

AND

qualcomm wcn3990Match-

Node

qualcomm wcn3991_firmwareMatch-

AND

qualcomm wcn3991Match-

Node

qualcomm wcn3998_firmwareMatch-

AND

qualcomm wcn3998Match-

Node

qualcomm wcn3999_firmwareMatch-

AND

qualcomm wcn3999Match-

Node

qualcomm wsa8810_firmwareMatch-

AND

qualcomm wsa8810Match-

Node

qualcomm wsa8815_firmwareMatch-

AND

qualcomm wsa8815Match-

[
  {
    "vendor": "Qualcomm, Inc.",
    "product": "Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables",
    "versions": [
      {
        "version": "AQT1000, AR8031, AR8035, CSRA6620, CSRA6640, FSM10055, FSM10056, QCA6391, QCA6420, QCA6430, QCA6564, QCA6564A, QCA6564AU, QCA6574, QCA6574A, QCA6574AU, QCA6584AU, QCA6595AU, QCA6696, QCA8337, QCM6125, QCS405, QCS410, QCS610, QCS6125, SA415M, SA515M, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SA8195P, SD 675, SD 8C, SD 8CX, SD660, SD665, SD675, SD678, SD720G, SD730, SD855, SDA429W, SDX50M, SDX55, SDX55M, SM6250, SM6250P, WCD9335, WCD9340, WCD9341, WCD9370, WCD9375, WCD9380, WCN3610, WCN3620, WCN3660B, WCN3950, WCN3980, WCN3988, WCN3990, WCN3991, WCN3998, WCN3999, WSA8810, WSA8815",
        "status": "affected"
      }
    ]
  }
]

Source	Link
packetstormsecurity	www.packetstormsecurity.com/files/172856/Qualcomm-NPU-Use-After-Free-Information-Leak.html
qualcomm	www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin

21 Nov 2024 05:45Current

7.9High risk

Vulners AI Score7.9

CVSS 27.2

CVSS 3.17.8 - 8.4

EPSS0.00026

CWE-416