CVE-2021-1962

Severity: medium (CVSS 6.7 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-09-09 · updated 2026-06-17
Weakness: CWE-120

Description

Buffer Overflow while processing IOCTL for getting peripheral endpoint information there is no proper validation for input maximum endpoint pair and its size in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Affected products

Qualcomm Aqt1000 Firmware: all versions
Qualcomm Ar9380 Firmware: all versions
Qualcomm Fsm10055 Firmware: all versions
Qualcomm Fsm10056 Firmware: all versions
Qualcomm Ipq8064 Firmware: all versions
Qualcomm Ipq8065 Firmware: all versions
Qualcomm Ipq8068 Firmware: all versions
Qualcomm Ipq8069 Firmware: all versions
Qualcomm Mdm9150 Firmware: all versions
Qualcomm Qca6391 Firmware: all versions
Qualcomm Qca6420 Firmware: all versions
Qualcomm Qca6430 Firmware: all versions
Qualcomm Qca6574 Firmware: all versions
Qualcomm Qca6574A Firmware: all versions
Qualcomm Qca6574Au Firmware: all versions
Qualcomm Qca6584Au Firmware: all versions
Qualcomm Qca6595 Firmware: all versions
Qualcomm Qca6595Au Firmware: all versions
Qualcomm Qca6696 Firmware: all versions
Qualcomm Qca9531 Firmware: all versions
Qualcomm Qca9558 Firmware: all versions
Qualcomm Qca9561 Firmware: all versions
Qualcomm Qca9563 Firmware: all versions
Qualcomm Qca9880 Firmware: all versions
Qualcomm Qca9882 Firmware: all versions
Qualcomm Qca9886 Firmware: all versions
Qualcomm Qca9887 Firmware: all versions
Qualcomm Qca9888 Firmware: all versions
Qualcomm Qca9889 Firmware: all versions
Qualcomm Qca9896 Firmware: all versions

References

Get alerted when CVE-2021-1962 or the next vulnerability affects your stack