CVE-2021-1912

HIGH

Qualcomm AQT1000 Firmware - Integer Overflow in Length Calculation

Title source: llm

Description

Possible integer overflow can occur due to improper length check while calculating count and grace period in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

References (1)

Core 1

Core References

Vendor Advisory x_refsource_confirm

https://www.qualcomm.com/company/product-security/bulletins/november-2021-bulletin

Scores

CVSS v3 8.4

EPSS 0.0003

EPSS Percentile 9.9%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-190

Status published

Products (42)

qualcomm/aqt1000_firmware

qualcomm/ar8035_firmware

qualcomm/csrb31024_firmware

qualcomm/qca6174a_firmware

qualcomm/qca6390_firmware

qualcomm/qca6391_firmware

qualcomm/qca6420_firmware

qualcomm/qca6421_firmware

qualcomm/qca6426_firmware

qualcomm/qca6430_firmware

... and 32 more

Published Nov 12, 2021

Tracked Since Feb 18, 2026