CVE-2021-1950

HIGH

Qualcomm AR8035 and other Firmware - Face Authentication Bypass via Secure Memory Cleaning Issue

Title source: llm
STIX 2.1

Description

Improper cleaning of secure memory between authenticated users can lead to face authentication bypass in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking

References (1)

Core 1
Core References

Scores

CVSS v3 7.8
EPSS 0.0003
EPSS Percentile 9.4%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-287
Status published
Products (50)
qualcomm/ar8035_firmware
qualcomm/csr8811_firmware
qualcomm/ipq6000_firmware
qualcomm/ipq6005_firmware
qualcomm/ipq6010_firmware
qualcomm/ipq6018_firmware
qualcomm/ipq6028_firmware
qualcomm/qca4024_firmware
qualcomm/qca6390_firmware
qualcomm/qca6391_firmware
... and 40 more
Published Apr 01, 2022
Tracked Since Feb 18, 2026