CVE-2021-1889
7.8 highEPSS 0.2%
High (7.8) in qualcomm. EPSS 0.2% chance of exploitation in the next 30 days.
Possible buffer overflow due to lack of length check in Trusted Application in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables
Severity
CVSS 3.1
7.8 highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 6% of CVEs (scores of 2026-10-31)
- CWE
- CWE-120
- Published
- Modified
- Record from
- the NVD, synced
Affected
- qualcomm:apq8017_firmware
- qualcomm:apq8037_firmware
- qualcomm:apq8053_firmware
- qualcomm:apq8064au_firmware
- qualcomm:apq8096au_firmware
- qualcomm:aqt1000_firmware
- qualcomm:ar8031_firmware
- qualcomm:ar8035_firmware
- qualcomm:csra6620_firmware
- qualcomm:csra6640_firmware
- qualcomm:csrb31024_firmware
- qualcomm:fsm10055_firmware
- qualcomm:fsm10056_firmware
- qualcomm:mdm9205_firmware
- qualcomm:mdm9640_firmware
- qualcomm:mdm9650_firmware
- qualcomm:mdm9655_firmware
- qualcomm:msm8917_firmware
- qualcomm:msm8920_firmware
- qualcomm:msm8937_firmware
- qualcomm:msm8940_firmware
- qualcomm:msm8953_firmware
- qualcomm:msm8996au_firmware
- qualcomm:pm8937_firmware
- qualcomm:qca4004_firmware
- qualcomm:qca4020_firmware
- qualcomm:qca6174a_firmware
- qualcomm:qca6175a_firmware
- qualcomm:qca6234_firmware
- qualcomm:qca6320_firmware
- qualcomm:qca6390_firmware
- qualcomm:qca6391_firmware
- qualcomm:qca6420_firmware
- qualcomm:qca6421_firmware
- qualcomm:qca6426_firmware
- qualcomm:qca6430_firmware
- qualcomm:qca6431_firmware
- qualcomm:qca6436_firmware
- qualcomm:qca6564_firmware
- qualcomm:qca6564a_firmware
- qualcomm:qca6564au_firmware
- qualcomm:qca6574_firmware
- qualcomm:qca6574a_firmware
- qualcomm:qca6574au_firmware
- qualcomm:qca6584au_firmware
- qualcomm:qca6595_firmware
- qualcomm:qca6595au_firmware
- qualcomm:qca6694_firmware
- qualcomm:qca6694au_firmware
- qualcomm:qca6696_firmware
References
Check your stackJSON