7.8

CVE-2021-1912

Possible integer overflow can occur due to improper length check while calculating count and grace period in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Qualcomm ≫ Aqt1000 Firmware Version -
   Qualcomm ≫ Aqt1000 Version -
Qualcomm ≫ Ar8035 Firmware Version -
   Qualcomm ≫ Ar8035 Version -
Qualcomm ≫ Csrb31024 Firmware Version -
   Qualcomm ≫ Csrb31024 Version -
Qualcomm ≫ Qca6174a Firmware Version -
   Qualcomm ≫ Qca6174a Version -
Qualcomm ≫ Qca6390 Firmware Version -
   Qualcomm ≫ Qca6390 Version -
Qualcomm ≫ Qca6391 Firmware Version -
   Qualcomm ≫ Qca6391 Version -
Qualcomm ≫ Qca6420 Firmware Version -
   Qualcomm ≫ Qca6420 Version -
Qualcomm ≫ Qca6421 Firmware Version -
   Qualcomm ≫ Qca6421 Version -
Qualcomm ≫ Qca6426 Firmware Version -
   Qualcomm ≫ Qca6426 Version -
Qualcomm ≫ Qca6430 Firmware Version -
   Qualcomm ≫ Qca6430 Version -
Qualcomm ≫ Qca6431 Firmware Version -
   Qualcomm ≫ Qca6431 Version -
Qualcomm ≫ Qca6436 Firmware Version -
   Qualcomm ≫ Qca6436 Version -
Qualcomm ≫ Qca6564au Firmware Version -
   Qualcomm ≫ Qca6564au Version -
Qualcomm ≫ Qca6574a Firmware Version -
   Qualcomm ≫ Qca6574a Version -
Qualcomm ≫ Qca6574au Firmware Version -
   Qualcomm ≫ Qca6574au Version -
Qualcomm ≫ Qca6584au Firmware Version -
   Qualcomm ≫ Qca6584au Version -
Qualcomm ≫ Qca6595au Firmware Version -
   Qualcomm ≫ Qca6595au Version -
Qualcomm ≫ Qca6696 Firmware Version -
   Qualcomm ≫ Qca6696 Version -
Qualcomm ≫ Qca8337 Firmware Version -
   Qualcomm ≫ Qca8337 Version -
Qualcomm ≫ Qca9377 Firmware Version -
   Qualcomm ≫ Qca9377 Version -
Qualcomm ≫ Qcx315 Firmware Version -
   Qualcomm ≫ Qcx315 Version -
Qualcomm ≫ Sa415m Firmware Version -
   Qualcomm ≫ Sa415m Version -
Qualcomm ≫ Sa515m Firmware Version -
   Qualcomm ≫ Sa515m Version -
Qualcomm ≫ Sd 8c Firmware Version -
   Qualcomm ≫ Sd 8c Version -
Qualcomm ≫ Sd 8cx Firmware Version -
   Qualcomm ≫ Sd 8cx Version -
Qualcomm ≫ Sd855 Firmware Version -
   Qualcomm ≫ Sd855 Version -
Qualcomm ≫ Sd865 5g Firmware Version -
   Qualcomm ≫ Sd865 5g Version -
Qualcomm ≫ Sd870 Firmware Version -
   Qualcomm ≫ Sd870 Version -
Qualcomm ≫ Sdx24 Firmware Version -
   Qualcomm ≫ Sdx24 Version -
Qualcomm ≫ Sdx55 Firmware Version -
   Qualcomm ≫ Sdx55 Version -
Qualcomm ≫ Sdx55m Firmware Version -
   Qualcomm ≫ Sdx55m Version -
Qualcomm ≫ Sdxr2 5g Firmware Version -
   Qualcomm ≫ Sdxr2 5g Version -
Qualcomm ≫ Wcd9340 Firmware Version -
   Qualcomm ≫ Wcd9340 Version -
Qualcomm ≫ Wcd9341 Firmware Version -
   Qualcomm ≫ Wcd9341 Version -
Qualcomm ≫ Wcd9380 Firmware Version -
   Qualcomm ≫ Wcd9380 Version -
Qualcomm ≫ Wcd9385 Firmware Version -
   Qualcomm ≫ Wcd9385 Version -
Qualcomm ≫ Wcn3998 Firmware Version -
   Qualcomm ≫ Wcn3998 Version -
Qualcomm ≫ Wcn6750 Firmware Version -
   Qualcomm ≫ Wcn6750 Version -
Qualcomm ≫ Wcn6850 Firmware Version -
   Qualcomm ≫ Wcn6850 Version -
Qualcomm ≫ Wcn6851 Firmware Version -
   Qualcomm ≫ Wcn6851 Version -
Qualcomm ≫ Wsa8810 Firmware Version -
   Qualcomm ≫ Wsa8810 Version -
Qualcomm ≫ Wsa8815 Firmware Version -
   Qualcomm ≫ Wsa8815 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.15% 0.045
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NIST 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
Qualcomm 8.4 2.5 5.9
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-190 Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

https://www.qualcomm.com/company/product-security/bulletins/november-2021-bulletin
Vendor Advisory