CVE-2021-1969
MEDIUMQualcomm AQT1000 Firmware - Kernel Memory Information Exposure via Improper Input Validation
Title source: llmDescription
Improper validation of kernel buffer address while copying information back to user buffer can lead to kernel memory information exposure to user space in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
References (2)
Core 2
Core References
Patch, Vendor Advisory
https://www.qualcomm.com/company/product-security/bulletins/october-2021-bulletin
Exploit, Third Party Advisory
http://packetstormsecurity.com/files/172856/Qualcomm-NPU-Use-After-Free-Information-Leak.html
Scores
CVSS v3
6.2
EPSS
0.0003
EPSS Percentile
10.6%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Details
CWE
CWE-20
Status
published
Products (50)
qualcomm/aqt1000_firmware
qualcomm/ar8031_firmware
qualcomm/ar8035_firmware
qualcomm/csra6620_firmware
qualcomm/csra6640_firmware
qualcomm/fsm10055_firmware
qualcomm/fsm10056_firmware
qualcomm/mdm9150_firmware
qualcomm/qca6391_firmware
qualcomm/qca6420_firmware
... and 40 more
Published
Oct 20, 2021
Tracked Since
Feb 18, 2026