CVSS 3.1
4.6 mediumCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HCVE-2021-1901
Medium (4.6) in qualcomm. EPSS 0.1% chance of exploitation in the next 30 days.
Possible buffer over-read due to lack of length check while flashing meta images in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Severity
- EPSS
- 0.1% chance of exploitation in the next 30 days; higher than 3% of CVEs (scores of 2026-10-31)
- CWE
- CWE-125
- Published
- Modified
- Record from
- the NVD, synced
Affected
- qualcomm:apq8009_firmware
- qualcomm:apq8053_firmware
- qualcomm:aqt1000_firmware
- qualcomm:mdm9206_firmware
- qualcomm:qca6420_firmware
- qualcomm:qca6430_firmware
- qualcomm:qca9367_firmware
- qualcomm:qca9377_firmware
- qualcomm:qualcomm215_firmware
- qualcomm:sd205_firmware
- qualcomm:sd210_firmware
- qualcomm:sd675_firmware
- qualcomm:sd678_firmware
- qualcomm:sd720g_firmware
- qualcomm:sd730_firmware
- qualcomm:sd855_firmware
- qualcomm:sd_675_firmware
- qualcomm:sda429w_firmware
- qualcomm:sdx50m_firmware
- qualcomm:sdx55_firmware
- qualcomm:sdx55m_firmware
- qualcomm:sm6250_firmware
- qualcomm:wcd9326_firmware
- qualcomm:wcd9330_firmware
- qualcomm:wcd9340_firmware
- qualcomm:wcd9341_firmware
- qualcomm:wcd9370_firmware
- qualcomm:wcd9375_firmware
- qualcomm:wcd9380_firmware
- qualcomm:wcn3610_firmware
- qualcomm:wcn3615_firmware
- qualcomm:wcn3620_firmware
- qualcomm:wcn3660b_firmware
- qualcomm:wcn3680_firmware
- qualcomm:wcn3680b_firmware
- qualcomm:wcn3950_firmware
- qualcomm:wcn3980_firmware
- qualcomm:wcn3988_firmware
- qualcomm:wcn3991_firmware
- qualcomm:wcn3998_firmware
- qualcomm:wsa8810_firmware
- qualcomm:wsa8815_firmware