CVE-2021-1918

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-01-03 · updated 2026-06-17
Weakness: CWE-668

Description

Improper handling of resource allocation in virtual machines can lead to information exposure in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

Affected products

Qualcomm Qca6391 Firmware: all versions
Qualcomm Qcm6490 Firmware: all versions
Qualcomm Qcs6490 Firmware: all versions
Qualcomm Qrb5165 Firmware: all versions
Qualcomm Qrb5165N Firmware: all versions
Qualcomm Sd690 5G Firmware: all versions
Qualcomm Sd750G Firmware: all versions
Qualcomm Sd765 Firmware: all versions
Qualcomm Sd765G Firmware: all versions
Qualcomm Sd768G Firmware: all versions
Qualcomm Sd778G Firmware: all versions
Qualcomm Sd888 5G Firmware: all versions
Qualcomm Sm7250P Firmware: all versions
Qualcomm Sm7325P Firmware: all versions
Qualcomm Wcd9370 Firmware: all versions
Qualcomm Wcd9375 Firmware: all versions
Qualcomm Wcd9380 Firmware: all versions
Qualcomm Wcd9385 Firmware: all versions
Qualcomm Wcn3988 Firmware: all versions
Qualcomm Wcn3991 Firmware: all versions
Qualcomm Wcn3998 Firmware: all versions
Qualcomm Wcn6750 Firmware: all versions
Qualcomm Wcn6850 Firmware: all versions
Qualcomm Wcn6851 Firmware: all versions
Qualcomm Wcn6855 Firmware: all versions
Qualcomm Wcn6856 Firmware: all versions
Qualcomm Wsa8810 Firmware: all versions
Qualcomm Wsa8815 Firmware: all versions
Qualcomm Wsa8830 Firmware: all versions
Qualcomm Wsa8835 Firmware: all versions

References

Get alerted when CVE-2021-1918 or the next vulnerability affects your stack