CVE-2021-1891

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

A possible use-after-free occurrence in audio driver can happen when pointers are not properly handled in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

No affected versions have been published.

Timeline

Published
May 7, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-18927.8Memory corruption due to improper input validation while processing IO control which is nonstandard in Snapdragon Compute, Snapdragon ConnecCVE-2021-18947.8Improper access control in TrustZone due to improper error handling while handling the signing key in Snapdragon Auto, Snapdragon Compute, SCVE-2021-18957.8Possible integer overflow due to improper length check while flashing an image in Snapdragon Consumer IOT, Snapdragon Industrial IOT, SnapdrCVE-2021-18964.3Weak configuration in WLAN could cause forwarding of unencrypted packets from one client to another in Snapdragon Compute, Snapdragon ConnecCVE-2021-18974.6Possible Buffer Over-read due to lack of validation of boundary checks when loading splash image in Snapdragon Consumer IOT, Snapdragon InduCVE-2021-18984.6Possible buffer over-read due to incorrect overflow check when loading splash image in Snapdragon Consumer IOT, Snapdragon Industrial IOT, SCVE-2021-18994.6Possible buffer over read due to lack of length check while flashing meta images in Snapdragon Consumer IOT, Snapdragon Industrial IOT, SnapCVE-2021-19007.0Possible use after free in Display due to race condition while creating an external display in Snapdragon Auto, Snapdragon Compute, SnapdragCVE-2021-19014.6Possible buffer over-read due to lack of length check while flashing meta images in Snapdragon Consumer IOT, Snapdragon Industrial IOT, SnapCVE-2021-19035.3Possible denial of service scenario can occur due to lack of length check on Channel Switch Announcement IE in beacon or probe response framCVE-2021-19045.5Child process can leak information from parent process due to numeric pids are getting compared and these pid can be reused in Snapdragon AuCVE-2021-19057.8Possible use after free due to improper handling of memory mapping of multiple processes simultaneously. in Snapdragon Auto, Snapdragon Comp