CVE-2021-1899 MEDIUM

CVE-2021-1899

Vendor Qualcomm, Inc.
Product Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
Published July 13, 2021
Last update August 3, 2024
View on NVD All CVEs

CVSS base score

4.6/10
Attack vector Physical
Attack complexity Low
Privileges required None
User interaction None
Confidentiality None
Integrity None

CVSS vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

What the vulnerability does

01Description

Possible buffer over read due to lack of length check while flashing meta images in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Key dates

02Disclosure timeline

July 13, 2021 CVE published
August 3, 2024 Record updated