PT-2021-13706 · Qualcomm · Qualcomm Snapdragon Auto+7

Published 2021-09-09 · Updated 2024-07-11 · CVE-2021-1961

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon Auto (affected versions not specified) Qualcomm Snapdragon Compute (affected versions not specified) Qualcomm Snapdragon Connectivity (affected versions not specified) Qualcomm Snapdragon Consumer IOT (affected versions not specified) Qualcomm Snapdragon Industrial IOT (affected versions not specified) Qualcomm Snapdragon Mobile (affected versions not specified) Qualcomm Snapdragon Voice & Music (affected versions not specified) Qualcomm Snapdragon Wearables (affected versions not specified)

Description: The issue is related to a possible buffer overflow due to the lack of an offset length check while updating the buffer value. This problem affects various Qualcomm Snapdragon products.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2021-1961

Affected Products

Qualcomm Snapdragon Auto

Qualcomm Snapdragon Compute

Qualcomm Snapdragon Connectivity

Qualcomm Snapdragon Consumer Iot

Qualcomm Snapdragon Industrial Iot

Qualcomm Snapdragon Mobile

Qualcomm Snapdragon Voice & Music

Qualcomm Snapdragon Wearables

References · 6

• 🔥 https://github.com/tamirzb/CVE-2021-1961 · Exploit
• https://qualcomm.com/company/product-security/bulletins/september-2021-bulletin · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-1961 · Security Note
• https://twitter.com/0xor0ne/status/1811294465493017064 · Twitter Post
• https://t.me/cvenotify/21257 · Telegram Post
• https://t.me/cibsecurity/28550 · Telegram Post