CVE-2021-1901

MediumCVSS 4.6/10Last modified Jun 17, 2026

Description

Possible buffer over-read due to lack of length check while flashing meta images in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Metrics

CVSS 3.1 4.6/10CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-125

Affected software

No affected versions have been published.

Timeline

Published
Jul 13, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-19035.3Possible denial of service scenario can occur due to lack of length check on Channel Switch Announcement IE in beacon or probe response framCVE-2021-19045.5Child process can leak information from parent process due to numeric pids are getting compared and these pid can be reused in Snapdragon AuCVE-2021-19057.8Possible use after free due to improper handling of memory mapping of multiple processes simultaneously. in Snapdragon Auto, Snapdragon CompCVE-2021-19065.5Improper handling of address deregistration on failure can lead to new GPU address allocation failure. in Snapdragon Auto, Snapdragon ComputCVE-2021-19077.5Possible buffer overflow due to lack of length check in BA request in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, SnapdragCVE-2021-19097.8Buffer overflow occurs in trusted applications due to lack of length check of parameters in Snapdragon Auto, Snapdragon Compute, Snapdragon CVE-2021-19109.8Double free in video due to lack of input buffer length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon CoCVE-2021-19127.8Possible integer overflow can occur due to improper length check while calculating count and grace period in Snapdragon Auto, Snapdragon ComCVE-2021-19138.4Possible integer overflow due to improper length check while updating grace period and count record in Snapdragon Auto, Snapdragon Compute, CVE-2021-19147.5Loop with unreachable exit condition may occur due to improper handling of unsupported input in Snapdragon Auto, Snapdragon Compute, SnapdraCVE-2021-19157.8Buffer overflow can occur due to improper validation of NDP application information length in Snapdragon Auto, Snapdragon Compute, SnapdragoCVE-2021-19169.8Possible buffer underflow due to lack of check for negative indices values when processing user provided input in Snapdragon Auto, Snapdrago
CVE-2021-1901: Medium severity, CVSS 4.6 | Vulnix