CVE-2021-1898

MediumCVSS 4.6/10Last modified Jun 17, 2026

Description

Possible buffer over-read due to incorrect overflow check when loading splash image in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Metrics

CVSS 3.1 4.6/10CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-125

Affected software

VendorProductVersions
Qualcomm, Inc.Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesAPQ8009, APQ8053, AQT1000, MDM9206, QCA6420, QCA6430, QCA9367, QCA9377, Qualcomm215, SD 675, SD205, SD210, SD675, SD678, SD720G, SD730, SD855, SDA429W, SDX50M, SDX55, SDX55M, SM6250, WCD9326, WCD9330, WCD9340, WCD9341, WCD9370, WCD9375, WCD9380, WCN3610, WCN3615, WCN3620, WCN3660B, WCN3680, WCN3680B, WCN3950, WCN3980, WCN3988, WCN3991, WCN3998, WSA8810, WSA8815

References

Timeline

Published
Jul 13, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-18994.6Possible buffer over read due to lack of length check while flashing meta images in Snapdragon Consumer IOT, Snapdragon Industrial IOT, SnapCVE-2021-19007.0Possible use after free in Display due to race condition while creating an external display in Snapdragon Auto, Snapdragon Compute, SnapdragCVE-2021-19014.6Possible buffer over-read due to lack of length check while flashing meta images in Snapdragon Consumer IOT, Snapdragon Industrial IOT, SnapCVE-2021-19035.3Possible denial of service scenario can occur due to lack of length check on Channel Switch Announcement IE in beacon or probe response framCVE-2021-19045.5Child process can leak information from parent process due to numeric pids are getting compared and these pid can be reused in Snapdragon AuCVE-2021-19057.8Possible use after free due to improper handling of memory mapping of multiple processes simultaneously. in Snapdragon Auto, Snapdragon CompCVE-2021-19065.5Improper handling of address deregistration on failure can lead to new GPU address allocation failure. in Snapdragon Auto, Snapdragon ComputCVE-2021-19077.5Possible buffer overflow due to lack of length check in BA request in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, SnapdragCVE-2021-19097.8Buffer overflow occurs in trusted applications due to lack of length check of parameters in Snapdragon Auto, Snapdragon Compute, Snapdragon CVE-2021-19109.8Double free in video due to lack of input buffer length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon CoCVE-2021-19127.8Possible integer overflow can occur due to improper length check while calculating count and grace period in Snapdragon Auto, Snapdragon ComCVE-2021-19138.4Possible integer overflow due to improper length check while updating grace period and count record in Snapdragon Auto, Snapdragon Compute,
CVE-2021-1898: Medium severity, CVSS 4.6 | Vulnix