Vulnerability Description
A race condition in fastrpc kernel driver for dynamic process creation can lead to use after free scenario in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Mobile, Snapdragon Wearables
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Qualcomm | Qca6574A Firmware | - |
| Qualcomm | Qca6574A | - |
| Qualcomm | Qca6574Au Firmware | - |
| Qualcomm | Qca6574Au | - |
| Qualcomm | Qca6595 Firmware | - |
| Qualcomm | Qca6595 | - |
| Qualcomm | Qca6595Au Firmware | - |
| Qualcomm | Qca6595Au | - |
| Qualcomm | Qca6696 Firmware | - |
| Qualcomm | Qca6696 | - |
| Qualcomm | Sa6145P Firmware | - |
| Qualcomm | Sa6145P | - |
| Qualcomm | Sa6150P Firmware | - |
| Qualcomm | Sa6150P | - |
| Qualcomm | Sa6155P Firmware | - |
| Qualcomm | Sa6155P | - |
| Qualcomm | Sa8145P Firmware | - |
| Qualcomm | Sa8145P | - |
| Qualcomm | Sa8150P Firmware | - |
| Qualcomm | Sa8150P | - |
Related Weaknesses (CWE)
References
- https://www.qualcomm.com/company/product-security/bulletins/september-2021-bullePatchVendor Advisory
- https://www.qualcomm.com/company/product-security/bulletins/september-2021-bullePatchVendor Advisory
FAQ
What is CVE-2021-1958?
CVE-2021-1958 is a vulnerability with a CVSS score of 6.7 (MEDIUM). A race condition in fastrpc kernel driver for dynamic process creation can lead to use after free scenario in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Mobile, Snapdragon Wearables
How severe is CVE-2021-1958?
CVE-2021-1958 has been rated MEDIUM with a CVSS base score of 6.7/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-1958?
Check the references section above for vendor advisories and patch information. Affected products include: Qualcomm Qca6574A Firmware, Qualcomm Qca6574A, Qualcomm Qca6574Au Firmware, Qualcomm Qca6574Au, Qualcomm Qca6595 Firmware.