Buffer overflow in Qualcomm products - CVE-2021-1892
Published: April 5, 2021
Vulnerability identifier: #VU51884
CSH Severity: Low
CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2021-1892
CWE-ID: CWE-119
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to a boundary error while processing nonstandard IO control in WLAN. A malicious application can trigger memory corruption and execute arbitrary code with elevated privileges.
Affected software
WCD9335
QLN1035BD
SD8C
SD8CX
SDR8150
SMB1350
SMB1351
SMB1380
SMB1381
SMB1390
SMB2351
QFE4455FC
WCD9340
WCD9341
WCN3990
WCN3998
WCN6850
WCN6851
WCN6855
WCN6856
WGR7640
WSA8810
WSA8815
WTR5975
QCA6335
PM8005
PM855
PM855P
PM8998
PMI8998
QAT3550
QCA1062
QCA1064
QCA2066
QCA6164
QCA6174
QCA6310
AQT1000
QCA6391
QCA6420
QCA6430
QCA6595AU
QCN7606
QET4100
QFE2081FC
QFE2082FC
QFE3100
QFE3440FC
SD835
SD845
SD850
QCA6174A
QCA9377
QCN7605
QLN1035BD
SD8C
SD8CX
SDR8150
SMB1350
SMB1351
SMB1380
SMB1381
SMB1390
SMB2351
QFE4455FC
WCD9340
WCD9341
WCN3990
WCN3998
WCN6850
WCN6851
WCN6855
WCN6856
WGR7640
WSA8810
WSA8815
WTR5975
QCA6335
PM8005
PM855
PM855P
PM8998
PMI8998
QAT3550
QCA1062
QCA1064
QCA2066
QCA6164
QCA6174
QCA6310
AQT1000
QCA6391
QCA6420
QCA6430
QCA6595AU
QCN7606
QET4100
QFE2081FC
QFE2082FC
QFE3100
QFE3440FC
SD835
SD845
SD850
QCA6174A
QCA9377
QCN7605
How to mitigate CVE-2021-1892
Install updates from vendor's website.