CVE-2021-1912

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Possible integer overflow can occur due to improper length check while calculating count and grace period in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-190

Affected software

VendorProductVersions
Qualcomm, Inc.Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon MobileAQT1000, AR8035, CSRB31024, QCA6174A, QCA6390, QCA6391, QCA6420, QCA6421, QCA6426, QCA6430, QCA6431, QCA6436, QCA6564AU, QCA6574A, QCA6574AU, QCA6584AU, QCA6595AU, QCA6696, QCA8337, QCA9377, QCX315, SA415M, SA515M, SD 8C, SD 8CX, SD855, SD865 5G, SD870, SDX24, SDX55, SDX55M, SDXR2 5G, WCD9340, WCD9341, WCD9380, WCD9385, WCN3998, WCN6750, WCN6850, WCN6851, WSA8810, WSA8815

References

Timeline

Published
Nov 12, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-19138.4Possible integer overflow due to improper length check while updating grace period and count record in Snapdragon Auto, Snapdragon Compute, CVE-2021-19147.5Loop with unreachable exit condition may occur due to improper handling of unsupported input in Snapdragon Auto, Snapdragon Compute, SnapdraCVE-2021-19157.8Buffer overflow can occur due to improper validation of NDP application information length in Snapdragon Auto, Snapdragon Compute, SnapdragoCVE-2021-19169.8Possible buffer underflow due to lack of check for negative indices values when processing user provided input in Snapdragon Auto, SnapdragoCVE-2021-19178.4Null pointer dereference can occur due to memory allocation failure in DIAG in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,CVE-2021-19186.5Improper handling of resource allocation in virtual machines can lead to information exposure in Snapdragon Consumer IOT, Snapdragon IndustrCVE-2021-19199.8Integer underflow can occur when the RTCP length is lesser than than the actual blocks present in Snapdragon Auto, Snapdragon Compute, SnapdCVE-2021-19209.8Integer underflow can occur due to improper handling of incoming RTCP packets in Snapdragon Auto, Snapdragon Compute, Snapdragon ConnectivitCVE-2021-19217.0Possible memory corruption due to Improper handling of hypervisor unmap operations for concurrent memory operations in Snapdragon Auto, SnapCVE-2021-19237.8Incorrect pointer argument passed to trusted application TA could result in un-intended memory operations in Snapdragon Auto, Snapdragon ComCVE-2021-19245.5Information disclosure through timing and power side-channels during mod exponentiation for RSA-CRT in Snapdragon Auto, Snapdragon Compute, CVE-2021-19257.5Possible denial of service scenario due to improper handling of group management action frame in Snapdragon Auto, Snapdragon Compute, Snapdr
CVE-2021-1912: High severity, CVSS 7.8 | Vulnix