HIGH

CVE-2021-1905

Qualcomm Apq8009 Firmware 2021-05-07 CVSS v3.1

CVSS

7.8

KEV

Description

Possible use after free due to improper handling of memory mapping of multiple processes simultaneously. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Summary dbcve.org

Use-after-free vulnerability in Qualcomm Snapdragon chipsets caused by improper handling of memory mapping when multiple processes access memory simultaneously. This memory safety flaw could allow a local attacker to execute arbitrary code or cause denial of service by accessing freed memory.

Mitigation

Apply firmware/security updates provided by device manufacturers (OEMs) that address this vulnerability in the Snapdragon baseband/processor firmware. Users should check with their device vendors for available patches.

Patch Commit

Weakness (CWE)

CWE-416 Use After Free

EPSS Score

1.54%

Probability of exploitation in next 30 days

73.9th percentile

References

https://www.qualcomm.com/company/product-security/bulletins/may-2021-bulletin Patch, Vendor Advisory https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-1905 US Government Resource

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE