CVE-2021-1887

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-07-13 · updated 2026-06-17
Weakness: CWE-617

Description

An assertion can be reached in the WLAN subsystem while using the Wi-Fi Fine Timing Measurement protocol in Snapdragon Wired Infrastructure and Networking

Affected products

Qualcomm Ar7420 Firmware: all versions
Qualcomm Ar9380 Firmware: all versions
Qualcomm Csr8811 Firmware: all versions
Qualcomm Ipq4018 Firmware: all versions
Qualcomm Ipq4019 Firmware: all versions
Qualcomm Ipq4028 Firmware: all versions
Qualcomm Ipq4029 Firmware: all versions
Qualcomm Ipq8064 Firmware: all versions
Qualcomm Ipq8065 Firmware: all versions
Qualcomm Ipq8069 Firmware: all versions
Qualcomm Ipq8074 Firmware: all versions
Qualcomm Qca6310 Firmware: all versions
Qualcomm Qca6320 Firmware: all versions
Qualcomm Qca6335 Firmware: all versions
Qualcomm Qca6428 Firmware: all versions
Qualcomm Qca6438 Firmware: all versions
Qualcomm Qca7500 Firmware: all versions
Qualcomm Qca7520 Firmware: all versions
Qualcomm Qca7550 Firmware: all versions
Qualcomm Qca9531 Firmware: all versions
Qualcomm Qca9558 Firmware: all versions
Qualcomm Qca9561 Firmware: all versions
Qualcomm Qca9563 Firmware: all versions
Qualcomm Qca9880 Firmware: all versions
Qualcomm Qca9882 Firmware: all versions
Qualcomm Qca9887 Firmware: all versions
Qualcomm Qca9888 Firmware: all versions
Qualcomm Qca9889 Firmware: all versions
Qualcomm Qca9896 Firmware: all versions
Qualcomm Qca9898 Firmware: all versions

References

https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin
https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin

Get alerted when CVE-2021-1887 or the next vulnerability affects your stack