CVE-2021-1894

HIGH

Qualcomm AR8031 and related firmware - Improper Access Control via TrustZone Error Handling

Title source: llm

Description

Improper access control in TrustZone due to improper error handling while handling the signing key in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

References (1)

Core 1

Core References

Vendor Advisory x_refsource_confirm

https://www.qualcomm.com/company/product-security/bulletins/december-2021-bulletin

Scores

CVSS v3 7.1

EPSS 0.0003

EPSS Percentile 10.3%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Details

CWE

CWE-755

Status published

Products (50)

qualcomm/ar8031_firmware

qualcomm/ar8035_firmware

qualcomm/csra6620_firmware

qualcomm/csra6640_firmware

qualcomm/csrb31024_firmware

qualcomm/fsm10055_firmware

qualcomm/fsm10056_firmware

qualcomm/mdm9150_firmware

qualcomm/mdm9205_firmware

qualcomm/mdm9628_firmware

... and 40 more

Published Jan 03, 2022

Tracked Since Feb 18, 2026