CVE-2021-1905
high · 8.4Actively exploitedOn the CISA Known Exploited Vulnerabilities catalog
Apply updates per vendor instructions.
Added 2021-11-03Remediation due 2022-05-03
Possible use after free due to improper handling of memory mapping of multiple processes simultaneously. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
8.4
CVSS
1.5%
EPSS (exploit prob.)
74th
EPSS percentile
2021-05-07
Published
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-416
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| qualcomm | apq8009_firmware | all versions |
| qualcomm | apq8009 | all versions |
| qualcomm | apq8009w_firmware | all versions |
| qualcomm | apq8009w | all versions |
| qualcomm | apq8017_firmware | all versions |
| qualcomm | apq8017 | all versions |
| qualcomm | apq8053_firmware | all versions |
| qualcomm | apq8053 | all versions |
| qualcomm | apq8064au_firmware | all versions |
| qualcomm | apq8064au | all versions |
| qualcomm | apq8096au_firmware | all versions |
| qualcomm | apq8096au | all versions |
| qualcomm | aqt1000_firmware | all versions |
| qualcomm | aqt1000 | all versions |
| qualcomm | ar8031_firmware | all versions |
| qualcomm | ar8031 | all versions |
| qualcomm | ar8035_firmware | all versions |
| qualcomm | ar8035 | all versions |
| qualcomm | ar8151_firmware | all versions |
| qualcomm | ar8151 | all versions |
| qualcomm | csra6620_firmware | all versions |
| qualcomm | csra6620 | all versions |
| qualcomm | csra6640_firmware | all versions |
| qualcomm | csra6640 | all versions |
| qualcomm | fsm10055_firmware | all versions |
| qualcomm | fsm10055 | all versions |
| qualcomm | fsm10056_firmware | all versions |
| qualcomm | fsm10056 | all versions |
| qualcomm | mdm9206_firmware | all versions |
| qualcomm | mdm9206 | all versions |
| qualcomm | mdm9607_firmware | all versions |
| qualcomm | mdm9607 | all versions |
| qualcomm | mdm9626_firmware | all versions |
| qualcomm | mdm9626 | all versions |
| qualcomm | mdm9628_firmware | all versions |
| qualcomm | mdm9628 | all versions |
| qualcomm | mdm9650_firmware | all versions |
| qualcomm | mdm9650 | all versions |
| qualcomm | msm8909w_firmware | all versions |
| qualcomm | msm8909w | all versions |
Check a specific version with /api/v1/cve/match.
References
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2021-1905