PT-2021-13707 · Qualcomm · Snapdragon

Published 2021-09-09 · Updated 2021-09-22 · CVE-2021-1962

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon (affected versions not specified)

Description: The issue is related to a buffer overflow that occurs while processing IOCTL for getting peripheral endpoint information. There is no proper validation for input maximum endpoint pair and its size in various Snapdragon products, including Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2021-1962

Affected Products

Snapdragon

References · 3

• https://qualcomm.com/company/product-security/bulletins/september-2021-bulletin · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-1962 · Security Note
• https://t.me/cvenotify/21258 · Telegram Post