CVE-2021-1965

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Possible buffer overflow due to lack of parameter length check during MBSSID scan IE parse in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-20CWE-120

Affected software

No affected versions have been published.

Timeline

Published
Jul 13, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-19666.7Possible buffer overflow due to lack of length check of source and destination buffer before copying in Snapdragon Auto, Snapdragon Compute,CVE-2021-19675.3Possible stack buffer overflow due to lack of check on the maximum number of post NAN discovery attributes while processing a NAN Match evenCVE-2021-19685.5Improper validation of kernel buffer address while copying information back to user buffer can lead to kernel memory information exposure toCVE-2021-19695.5Improper validation of kernel buffer address while copying information back to user buffer can lead to kernel memory information exposure toCVE-2021-19707.5Possible out of bound read due to lack of length check of FT sub-elements in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, SCVE-2021-19717.5Possible assertion due to lack of physical layer state validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, SnapdragoCVE-2021-19729.8Possible buffer overflow due to improper validation of device types during P2P search in Snapdragon Auto, Snapdragon Compute, Snapdragon ConCVE-2021-19737.8A FTM Diag command can allow an arbitrary write into modem OS space in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, SnapdraCVE-2021-19747.5Possible buffer over read due to lack of alignment between map or unmap length of IPA SMMU and WLAN SMMU in Snapdragon Auto, Snapdragon CompCVE-2021-19759.8Possible heap overflow due to improper length check of domain while parsing the DNS response in Snapdragon Auto, Snapdragon Compute, SnapdraCVE-2021-19769.8A use after free can occur due to improper validation of P2P device address in PD Request frame in Snapdragon Auto, Snapdragon Compute, SnapCVE-2021-19779.1Possible buffer over read due to improper validation of frame length while processing AEAD decryption during ASSOC response in Snapdragon Au
CVE-2021-1965: Critical severity, CVSS 9.8 | Vulnix