4.6

CVE-2021-1899

Possible buffer over read due to lack of length check while flashing meta images in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Qualcomm ≫ Apq8009w Firmware Version -
   Qualcomm ≫ Apq8009w Version -
Qualcomm ≫ Aqt1000 Firmware Version -
   Qualcomm ≫ Aqt1000 Version -
Qualcomm ≫ Msm8909w Firmware Version -
   Qualcomm ≫ Msm8909w Version -
Qualcomm ≫ Qca4020 Firmware Version -
   Qualcomm ≫ Qca4020 Version -
Qualcomm ≫ Qca6174a Firmware Version -
   Qualcomm ≫ Qca6174a Version -
Qualcomm ≫ Qca6420 Firmware Version -
   Qualcomm ≫ Qca6420 Version -
Qualcomm ≫ Qca6430 Firmware Version -
   Qualcomm ≫ Qca6430 Version -
Qualcomm ≫ Qca9379 Firmware Version -
   Qualcomm ≫ Qca9379 Version -
Qualcomm ≫ Qualcomm215 Firmware Version -
   Qualcomm ≫ Qualcomm215 Version -
Qualcomm ≫ Sd 675 Firmware Version -
   Qualcomm ≫ Sd 675 Version -
Qualcomm ≫ Sd205 Firmware Version -
   Qualcomm ≫ Sd205 Version -
Qualcomm ≫ Sd210 Firmware Version -
   Qualcomm ≫ Sd210 Version -
Qualcomm ≫ Sd675 Firmware Version -
   Qualcomm ≫ Sd675 Version -
Qualcomm ≫ Sd678 Firmware Version -
   Qualcomm ≫ Sd678 Version -
Qualcomm ≫ Sd720g Firmware Version -
   Qualcomm ≫ Sd720g Version -
Qualcomm ≫ Sd730 Firmware Version -
   Qualcomm ≫ Sd730 Version -
Qualcomm ≫ Sd855 Firmware Version -
   Qualcomm ≫ Sd855 Version -
Qualcomm ≫ Sda429w Firmware Version -
   Qualcomm ≫ Sda429w Version -
Qualcomm ≫ Sdm429w Firmware Version -
   Qualcomm ≫ Sdm429w Version -
Qualcomm ≫ Sdx50m Firmware Version -
   Qualcomm ≫ Sdx50m Version -
Qualcomm ≫ Sdx55 Firmware Version -
   Qualcomm ≫ Sdx55 Version -
Qualcomm ≫ Sdx55m Firmware Version -
   Qualcomm ≫ Sdx55m Version -
Qualcomm ≫ Sm6250 Firmware Version -
   Qualcomm ≫ Sm6250 Version -
Qualcomm ≫ Wcd9326 Firmware Version -
   Qualcomm ≫ Wcd9326 Version -
Qualcomm ≫ Wcd9341 Firmware Version -
   Qualcomm ≫ Wcd9341 Version -
Qualcomm ≫ Wcd9370 Firmware Version -
   Qualcomm ≫ Wcd9370 Version -
Qualcomm ≫ Wcd9375 Firmware Version -
   Qualcomm ≫ Wcd9375 Version -
Qualcomm ≫ Wcd9380 Firmware Version -
   Qualcomm ≫ Wcd9380 Version -
Qualcomm ≫ Wcn3610 Firmware Version -
   Qualcomm ≫ Wcn3610 Version -
Qualcomm ≫ Wcn3615 Firmware Version -
   Qualcomm ≫ Wcn3615 Version -
Qualcomm ≫ Wcn3620 Firmware Version -
   Qualcomm ≫ Wcn3620 Version -
Qualcomm ≫ Wcn3660b Firmware Version -
   Qualcomm ≫ Wcn3660b Version -
Qualcomm ≫ Wcn3680 Firmware Version -
   Qualcomm ≫ Wcn3680 Version -
Qualcomm ≫ Wcn3680b Firmware Version -
   Qualcomm ≫ Wcn3680b Version -
Qualcomm ≫ Wcn3950 Firmware Version -
   Qualcomm ≫ Wcn3950 Version -
Qualcomm ≫ Wcn3980 Firmware Version -
   Qualcomm ≫ Wcn3980 Version -
Qualcomm ≫ Wcn3988 Firmware Version -
   Qualcomm ≫ Wcn3988 Version -
Qualcomm ≫ Wcn3991 Firmware Version -
   Qualcomm ≫ Wcn3991 Version -
Qualcomm ≫ Wcn3998 Firmware Version -
   Qualcomm ≫ Wcn3998 Version -
Qualcomm ≫ Wsa8810 Firmware Version -
   Qualcomm ≫ Wsa8810 Version -
Qualcomm ≫ Wsa8815 Firmware Version -
   Qualcomm ≫ Wsa8815 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.14% 0.038
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.6 0.9 3.6
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NIST 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:N/I:N/A:P
Qualcomm 4.6 0.9 3.6
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin
Patch
Vendor Advisory