CVE-2021-1970

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Possible out of bound read due to lack of length check of FT sub-elements in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-20CWE-125

Affected software

No affected versions have been published.

Timeline

Published
Jul 13, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-19717.5Possible assertion due to lack of physical layer state validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, SnapdragoCVE-2021-19729.8Possible buffer overflow due to improper validation of device types during P2P search in Snapdragon Auto, Snapdragon Compute, Snapdragon ConCVE-2021-19737.8A FTM Diag command can allow an arbitrary write into modem OS space in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, SnapdraCVE-2021-19747.5Possible buffer over read due to lack of alignment between map or unmap length of IPA SMMU and WLAN SMMU in Snapdragon Auto, Snapdragon CompCVE-2021-19759.8Possible heap overflow due to improper length check of domain while parsing the DNS response in Snapdragon Auto, Snapdragon Compute, SnapdraCVE-2021-19769.8A use after free can occur due to improper validation of P2P device address in PD Request frame in Snapdragon Auto, Snapdragon Compute, SnapCVE-2021-19779.1Possible buffer over read due to improper validation of frame length while processing AEAD decryption during ASSOC response in Snapdragon AuCVE-2021-19797.8Possible buffer overflow due to improper validation of FTM command payload in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, CVE-2021-19809.1Possible buffer over read due to lack of length check while parsing beacon IE response in Snapdragon Auto, Snapdragon Compute, Snapdragon CoCVE-2021-19819.1Possible buffer over read due to improper IE size check of Bearer capability IE in MT setup request from network in Snapdragon Auto, SnapdraCVE-2021-19827.5Possible denial of service scenario due to improper input validation of received NAS OTA message in Snapdragon Auto, Snapdragon Compute, SnaCVE-2021-19837.8Possible buffer overflow due to improper handling of negative data length while processing write request in VR service in Snapdragon Auto, S