Cryptographic issues in Qualcomm products - CVE-2021-1924

Vulnerability identifier: #VU57901

CSH Severity: Low

CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2021-1924

CWE-ID: CWE-310

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local attacker to comrpomise the target system.

The vulnerability exists due to cryptographic issues through timing and power side-channels during mod exponentiation for RSA-CRT. A local attacker can gain access to sensitive information on the system.

QFE1100
SA415M
Qualcomm215
QSW8573
QSM8350
QSM8250
QRB5165N
QRB5165
QFE1952
QFE1922
SA515M
QCX315
QCS6490
QCS6125
QCS610
QCS603
QCS4290
QCS410
SC8180X+SDX55
SD429
SD 8CX
SD 8C
SD 675
SD 636
SD 455
SC8280XP
QCS2290
SA8195P
SA8155P
SA8155
SA8150P
SA8145P
SA6155
SA6150P
SA6145P
QCA9994
QCN5052
QCN5024
QCN5022
QCN5021
QCN3018
QCM6490
QCM6125
QCM4290
QCM2290
QCN5054
QCA9992
QCA9990
QCA9987
QCA9985
QCA9984
QCA9982
QCA9898
QCA9890
QCN6024
QCN9100
QCN9074
QCN9072
QCN9070
QCN9024
QCN9022
QCN9012
QCN9000
QCN6122
SD439
QCN6023
QCN5550
QCN5164
QCN5154
QCN5152
QCN5124
QCN5122
QCN5121
QCN5064
WCD9330
WCN3660
WCN3620
WCN3610
WCD9385
WCD9380
WCD9375
WCD9371
WCD9370
WCD9360
WCN3660A
WCD9306
SM7325
SM7250
SM6375
SM6250P
SM6250
SM6225
SM4125
SDXR2 5G
WCN6850
WTR3925L
WSA8835
WSA8830
WHS9410
WCN7851
WCN7850
WCN6856
WCN6855
WCN6851
SDXR1
WCN6750
WCN6740
WCN3999
WCN3991
WCN3988
WCN3950
WCN3910
WCN3680
WCN3660B
SD7c
SD780G
SD778G
SD768G
SD765G
SD765
SD750G
SD720G
SD820
SD690 5G
SD678
SD662
SD632
SD480
SD460
SDM830
SDX57M
SDX55M
SDX50M
SDX20M
SDX12
SDW2500
QCA9889
SDA429W
SD888 5G
SD870
SD865 5G
SD821
IPQ8069
IPQ8076
IPQ8074A
IPQ8072A
IPQ8072
IPQ8071A
IPQ8071
IPQ8070A
IPQ8070
IPQ8076A
IPQ8068
IPQ8066
IPQ8065
IPQ8062
IPQ6028
IPQ6018
IPQ6010
IPQ6005
MDM9207
MDM9625M
MDM9625
MDM9330
MDM9250
MDM9235M
MDM9230
MDM9225M
MDM9225
IPQ6000
MDM9205
MDM8635M
MDM8207
IPQ8174
IPQ8173
IPQ8078A
IPQ8078
APQ8084
CSR8811
CSR6030
AR9580
AR9380
AR8035
AR8031
AR7420
AR3012
CSRA6620
APQ8076
APQ8064AU
APQ8062
APQ8056
APQ8052
APQ8037
APQ8016
APQ8009W
FSM9916
IPQ5028
IPQ5018
IPQ5010
IPQ4029
IPQ4028
IPQ4018
FSM9955
FSM9950
MDM9626
FSM9915
FSM9910
FSM9905
FSM9900
FSM10056
FSM10055
CSRB31024
CSRA6640
QCA6564A
QCA6694
QCA6595AU
QCA6595
QCA6584AU
QCA6584
QCA6574A
QCA6574
QCA6564AU
QCA6694AU
QCA6564
QCA6438
QCA6436
QCA6431
QCA6428
QCA6426
QCA6421
QCA6391
QCA6390
QCA9888
QCA9887
QCA9886
QCA9882
QCA9880
QCA9561
QCA6335
QCA9367
QCA8337
QCA8081
QCA8075
QCA8072
QCA7550
QCA7520
QCA7500
QCA6696
MSM8209
MSM8956
MSM8952
MSM8916
MSM8608
MSM8962
MSM8208
MSM8108
MDM9655
MDM9645
MDM9635M
MDM9630
MDM9628
QCA4004
QCA6320
QCA6310
QCA6234
QCA6175A
QCA6174
QCA6164
QCA4024
QCA4020
QCA1990
QCA10901
PMP8074
PMD9635
PM8937
MSM8976SG
MSM8976
QCS605
QCS405
SD210
SD205
SA6155P
QCA9980
SD712
SD730
SD675
SD665
SD450
SDX55
SDX24
SDX20
SDM630
SDM429W
SD850
IPQ8074
IPQ8064
MDM9607
MDM9206
MDM9150
APQ8096AU
APQ8017
IPQ4019
QCA6574AU
QCA9377
QCA9558
QCA9531
QCA9379
MSM8940
MSM8937
MSM8920
MSM8917
MSM8909W
MDM9650
MDM9640
QCA6174A
APQ8009
MSM8996AU

Install updates from vendor's website.

• https://www.qualcomm.com/company/product-security/bulletins/november-2021-bulletin

• Multiple vulnerabilities in Qualcomm chipsets