1. Home
  2. CVE Database
  3. CVE-2021-1962
MEDIUM · 6.7

CVE-2021-1962

Buffer Overflow while processing IOCTL for getting peripheral endpoint information there is no proper validation for input maximum endpoint pair and its size in Snapdragon Auto, Snapdragon Consumer IO...

Vulnerability Description

Buffer Overflow while processing IOCTL for getting peripheral endpoint information there is no proper validation for input maximum endpoint pair and its size in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CVSS Score

6.7

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
QualcommAqt1000 Firmware-
QualcommAqt1000-
QualcommAr9380 Firmware-
QualcommAr9380-
QualcommFsm10055 Firmware-
QualcommFsm10055-
QualcommFsm10056 Firmware-
QualcommFsm10056-
QualcommIpq8064 Firmware-
QualcommIpq8064-
QualcommIpq8065 Firmware-
QualcommIpq8065-
QualcommIpq8068 Firmware-
QualcommIpq8068-
QualcommIpq8069 Firmware-
QualcommIpq8069-
QualcommMdm9150 Firmware-
QualcommMdm9150-
QualcommQca6391 Firmware-
QualcommQca6391-

Related Weaknesses (CWE)

CWE-120

References

FAQ

What is CVE-2021-1962?

CVE-2021-1962 is a vulnerability with a CVSS score of 6.7 (MEDIUM). Buffer Overflow while processing IOCTL for getting peripheral endpoint information there is no proper validation for input maximum endpoint pair and its size in Snapdragon Auto, Snapdragon Consumer IO...

How severe is CVE-2021-1962?

CVE-2021-1962 has been rated MEDIUM with a CVSS base score of 6.7/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-1962?

Check the references section above for vendor advisories and patch information. Affected products include: Qualcomm Aqt1000 Firmware, Qualcomm Aqt1000, Qualcomm Ar9380 Firmware, Qualcomm Ar9380, Qualcomm Fsm10055 Firmware.