CVE-2021-1940

7.8 highEPSS 0.2%

High (7.8) in qualcomm. EPSS 0.2% chance of exploitation in the next 30 days.

Use after free can occur due to improper handling of response from firmware in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 8% of CVEs (scores of 2026-10-31)
CWE: CWE-416
Published: 2021-07-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

qualcomm:aqt1000_firmware
qualcomm:ar8031_firmware
qualcomm:ar8035_firmware
qualcomm:csra6620_firmware
qualcomm:csra6640_firmware
qualcomm:fsm10055_firmware
qualcomm:fsm10056_firmware
qualcomm:qca6391_firmware
qualcomm:qca6420_firmware
qualcomm:qca6430_firmware
qualcomm:qca6564_firmware
qualcomm:qca6564a_firmware
qualcomm:qca6564au_firmware
qualcomm:qca6574_firmware
qualcomm:qca6574a_firmware
qualcomm:qca6574au_firmware
qualcomm:qca6584au_firmware
qualcomm:qca6595au_firmware
qualcomm:qca6696_firmware
qualcomm:qca8337_firmware
qualcomm:qcm6125_firmware
qualcomm:qcs405_firmware
qualcomm:qcs410_firmware
qualcomm:qcs610_firmware
qualcomm:qcs6125_firmware
qualcomm:sa415m_firmware
qualcomm:sa515m_firmware
qualcomm:sa6145p_firmware
qualcomm:sa6155_firmware
qualcomm:sa6155p_firmware
qualcomm:sa8155_firmware
qualcomm:sa8155p_firmware
qualcomm:sa8195p_firmware
qualcomm:sd660_firmware
qualcomm:sd665_firmware
qualcomm:sd675_firmware
qualcomm:sd678_firmware
qualcomm:sd720g_firmware
qualcomm:sd730_firmware
qualcomm:sd855_firmware
qualcomm:sd_675_firmware
qualcomm:sd_8c_firmware
qualcomm:sd_8cx_firmware
qualcomm:sda429w_firmware
qualcomm:sdx50m_firmware
qualcomm:sdx55_firmware
qualcomm:sdx55m_firmware
qualcomm:sm6250_firmware
qualcomm:sm6250p_firmware
qualcomm:wcd9335_firmware

References

Check your stack JSON