Multiple vulnerabilities in Qualcomm chipsets



Published: 2021-05-03 | Updated: 2021-05-20
Risk High
Patch available YES
Number of vulnerabilities 20
CVE-ID CVE-2021-1895
CVE-2020-11284
CVE-2021-1906
CVE-2021-1905
CVE-2021-1891
CVE-2021-1910
CVE-2020-11289
CVE-2020-11288
CVE-2020-11285
CVE-2020-11279
CVE-2021-1915
CVE-2020-11274
CVE-2020-11273
CVE-2020-11268
CVE-2021-1927
CVE-2021-1925
CVE-2020-11293
CVE-2020-11294
CVE-2020-11295
CVE-2020-11254
CWE-ID CWE-190
CWE-119
CWE-416
CWE-415
CWE-787
CWE-125
CWE-120
CWE-617
CWE-20
CWE-126
CWE-129
CWE-476
Exploitation vector Network
Public exploit Vulnerability #3 is being exploited in the wild.
Vulnerability #4 is being exploited in the wild.
Vulnerable software
Subscribe
APQ8009
Hardware solutions / Firmware

APQ8053
Hardware solutions / Firmware

MDM9206
Hardware solutions / Firmware

QCA9377
Hardware solutions / Firmware

QCA6574AU
Hardware solutions / Firmware

QCS405
Hardware solutions / Firmware

SA6155P
Hardware solutions / Firmware

SD675
Hardware solutions / Firmware

SD855
Hardware solutions / Firmware

SDX24
Hardware solutions / Firmware

SDX55
Hardware solutions / Firmware

APQ8017
Hardware solutions / Firmware

APQ8096AU
Hardware solutions / Firmware

MDM9150
Hardware solutions / Firmware

MDM9607
Hardware solutions / Firmware

MDM9650
Hardware solutions / Firmware

MSM8909W
Hardware solutions / Firmware

MSM8917
Hardware solutions / Firmware

MSM8953
Hardware solutions / Firmware

MSM8996AU
Hardware solutions / Firmware

QCA6174A
Hardware solutions / Firmware

QCS605
Hardware solutions / Firmware

SD636
Hardware solutions / Firmware

SD205
Hardware solutions / Firmware

SD210
Hardware solutions / Firmware

SD450
Hardware solutions / Firmware

SD665
Hardware solutions / Firmware

SD670
Hardware solutions / Firmware

SD710
Hardware solutions / Firmware

SD730
Hardware solutions / Firmware

SD835
Hardware solutions / Firmware

SD845
Hardware solutions / Firmware

SD888
Hardware solutions / Firmware

SDM429W
Hardware solutions / Firmware

SDM630
Hardware solutions / Firmware

SDX20
Hardware solutions / Firmware

QCA9379
Hardware solutions / Firmware

IPQ8064
Hardware solutions / Firmware

IPQ8074
Hardware solutions / Firmware

QCA9980
Hardware solutions / Firmware

MDM9640
Hardware solutions / Firmware

MSM8920
Hardware solutions / Firmware

MSM8937
Hardware solutions / Firmware

MSM8940
Hardware solutions / Firmware

SD712
Hardware solutions / Firmware

SD850
Hardware solutions / Firmware

IPQ4019
Hardware solutions / Firmware

QCA9531
Hardware solutions / Firmware

QCA9558
Hardware solutions / Firmware

QCN7605
Hardware solutions / Firmware

PM215
Mobile applications / Mobile firmware & hardware

PM8909
Mobile applications / Mobile firmware & hardware

PM8916
Mobile applications / Mobile firmware & hardware

PM8953
Mobile applications / Mobile firmware & hardware

PMD9607
Mobile applications / Mobile firmware & hardware

PMI8952
Mobile applications / Mobile firmware & hardware

QCA9367
Mobile applications / Mobile firmware & hardware

Qualcomm215
Mobile applications / Mobile firmware & hardware

SMB1358
Mobile applications / Mobile firmware & hardware

SMB1360
Mobile applications / Mobile firmware & hardware

SMB231
Mobile applications / Mobile firmware & hardware

WCD9326
Mobile applications / Mobile firmware & hardware

WCD9330
Mobile applications / Mobile firmware & hardware

WCN3615
Mobile applications / Mobile firmware & hardware

WCN3660B
Mobile applications / Mobile firmware & hardware

WCN3680
Mobile applications / Mobile firmware & hardware

WCN3680B
Mobile applications / Mobile firmware & hardware

WSA8810
Mobile applications / Mobile firmware & hardware

WSA8815
Mobile applications / Mobile firmware & hardware

WTR2965
Mobile applications / Mobile firmware & hardware

AQT1000
Mobile applications / Mobile firmware & hardware

AR8035
Mobile applications / Mobile firmware & hardware

PM3003A
Mobile applications / Mobile firmware & hardware

PM4125
Mobile applications / Mobile firmware & hardware

PM4250
Mobile applications / Mobile firmware & hardware

PM6125
Mobile applications / Mobile firmware & hardware

PM6150
Mobile applications / Mobile firmware & hardware

PM6150A
Mobile applications / Mobile firmware & hardware

PM6150L
Mobile applications / Mobile firmware & hardware

PM6350
Mobile applications / Mobile firmware & hardware

PM640A
Mobile applications / Mobile firmware & hardware

PM640L
Mobile applications / Mobile firmware & hardware

PM640P
Mobile applications / Mobile firmware & hardware

PM7250B
Mobile applications / Mobile firmware & hardware

PM8004
Mobile applications / Mobile firmware & hardware

PM8005
Mobile applications / Mobile firmware & hardware

PM8008
Mobile applications / Mobile firmware & hardware

PM8009
Mobile applications / Mobile firmware & hardware

PM8150A
Mobile applications / Mobile firmware & hardware

PM8150B
Mobile applications / Mobile firmware & hardware

PM8150C
Mobile applications / Mobile firmware & hardware

PM8150L
Mobile applications / Mobile firmware & hardware

PM8250
Mobile applications / Mobile firmware & hardware

PM8350
Mobile applications / Mobile firmware & hardware

PM855
Mobile applications / Mobile firmware & hardware

PM855B
Mobile applications / Mobile firmware & hardware

PM855L
Mobile applications / Mobile firmware & hardware

PM855P
Mobile applications / Mobile firmware & hardware

PM8998
Mobile applications / Mobile firmware & hardware

PMD9655
Mobile applications / Mobile firmware & hardware

PMI632
Mobile applications / Mobile firmware & hardware

PMI8998
Mobile applications / Mobile firmware & hardware

PMK8002
Mobile applications / Mobile firmware & hardware

PMK8003
Mobile applications / Mobile firmware & hardware

PMM8195AU
Mobile applications / Mobile firmware & hardware

PMM855AU
Mobile applications / Mobile firmware & hardware

PMR525
Mobile applications / Mobile firmware & hardware

PMX24
Mobile applications / Mobile firmware & hardware

PMX55
Mobile applications / Mobile firmware & hardware

QAT3522
Mobile applications / Mobile firmware & hardware

QAT3550
Mobile applications / Mobile firmware & hardware

QBT1500
Mobile applications / Mobile firmware & hardware

QBT2000
Mobile applications / Mobile firmware & hardware

QCA6390
Mobile applications / Mobile firmware & hardware

QCA6391
Mobile applications / Mobile firmware & hardware

QCA6420
Mobile applications / Mobile firmware & hardware

QCA6421
Mobile applications / Mobile firmware & hardware

QCA6426
Mobile applications / Mobile firmware & hardware

QCA6430
Mobile applications / Mobile firmware & hardware

QCA6431
Mobile applications / Mobile firmware & hardware

QCA6436
Mobile applications / Mobile firmware & hardware

QCA6595
Mobile applications / Mobile firmware & hardware

QCA9984
Mobile applications / Mobile firmware & hardware

QCM2290
Mobile applications / Mobile firmware & hardware

QCM4290
Mobile applications / Mobile firmware & hardware

QCS2290
Mobile applications / Mobile firmware & hardware

QCS4290
Mobile applications / Mobile firmware & hardware

QET4101
Mobile applications / Mobile firmware & hardware

QET5100
Mobile applications / Mobile firmware & hardware

QET6100
Mobile applications / Mobile firmware & hardware

QET6105
Mobile applications / Mobile firmware & hardware

QFS2530
Mobile applications / Mobile firmware & hardware

QFS2580
Mobile applications / Mobile firmware & hardware

QPA4360
Mobile applications / Mobile firmware & hardware

QPA5460
Mobile applications / Mobile firmware & hardware

QPA6560
Mobile applications / Mobile firmware & hardware

QSW8574
Mobile applications / Mobile firmware & hardware

QTC410S
Mobile applications / Mobile firmware & hardware

QTC800H
Mobile applications / Mobile firmware & hardware

QTC800S
Mobile applications / Mobile firmware & hardware

QTC801S
Mobile applications / Mobile firmware & hardware

QTM525
Mobile applications / Mobile firmware & hardware

SA8195P
Mobile applications / Mobile firmware & hardware

SD8C
Mobile applications / Mobile firmware & hardware

SD8CX
Mobile applications / Mobile firmware & hardware

SD460
Mobile applications / Mobile firmware & hardware

SD480
Mobile applications / Mobile firmware & hardware

SD662
Mobile applications / Mobile firmware & hardware

SD8655G
Mobile applications / Mobile firmware & hardware

SD870
Mobile applications / Mobile firmware & hardware

SD8885G
Mobile applications / Mobile firmware & hardware

SDM830
Mobile applications / Mobile firmware & hardware

SDR425
Mobile applications / Mobile firmware & hardware

SDR660
Mobile applications / Mobile firmware & hardware

SDR660G
Mobile applications / Mobile firmware & hardware

SDR735
Mobile applications / Mobile firmware & hardware

SDR735G
Mobile applications / Mobile firmware & hardware

SDR8150
Mobile applications / Mobile firmware & hardware

SDR8250
Mobile applications / Mobile firmware & hardware

SDR865
Mobile applications / Mobile firmware & hardware

SDX55M
Mobile applications / Mobile firmware & hardware

SDXR25G
Mobile applications / Mobile firmware & hardware

SM4125
Mobile applications / Mobile firmware & hardware

SMB1351
Mobile applications / Mobile firmware & hardware

SMB1354
Mobile applications / Mobile firmware & hardware

SMB1355
Mobile applications / Mobile firmware & hardware

SMB1390
Mobile applications / Mobile firmware & hardware

SMB1396
Mobile applications / Mobile firmware & hardware

SMR525
Mobile applications / Mobile firmware & hardware

SMR526
Mobile applications / Mobile firmware & hardware

SMR545
Mobile applications / Mobile firmware & hardware

SMR546
Mobile applications / Mobile firmware & hardware

WCD9340
Mobile applications / Mobile firmware & hardware

WCD9341
Mobile applications / Mobile firmware & hardware

WCD9360
Mobile applications / Mobile firmware & hardware

WCD9370
Mobile applications / Mobile firmware & hardware

WCD9375
Mobile applications / Mobile firmware & hardware

WCD9380
Mobile applications / Mobile firmware & hardware

WCD9385
Mobile applications / Mobile firmware & hardware

WCN3910
Mobile applications / Mobile firmware & hardware

WCN3950
Mobile applications / Mobile firmware & hardware

WCN3980
Mobile applications / Mobile firmware & hardware

WCN3988
Mobile applications / Mobile firmware & hardware

WCN3990
Mobile applications / Mobile firmware & hardware

WCN3991
Mobile applications / Mobile firmware & hardware

WCN3998
Mobile applications / Mobile firmware & hardware

WCN3999
Mobile applications / Mobile firmware & hardware

WGR7640
Mobile applications / Mobile firmware & hardware

WHS9410
Mobile applications / Mobile firmware & hardware

WTR3925
Mobile applications / Mobile firmware & hardware

WTR5975
Mobile applications / Mobile firmware & hardware

APQ8009W
Mobile applications / Mobile firmware & hardware

APQ8064AU
Mobile applications / Mobile firmware & hardware

AR8031
Mobile applications / Mobile firmware & hardware

AR8151
Mobile applications / Mobile firmware & hardware

CSRA6620
Mobile applications / Mobile firmware & hardware

CSRA6640
Mobile applications / Mobile firmware & hardware

CSRB31024
Mobile applications / Mobile firmware & hardware

FSM10055
Mobile applications / Mobile firmware & hardware

FSM10056
Mobile applications / Mobile firmware & hardware

MDM9250
Mobile applications / Mobile firmware & hardware

MDM9626
Mobile applications / Mobile firmware & hardware

MDM9628
Mobile applications / Mobile firmware & hardware

PM439
Mobile applications / Mobile firmware & hardware

PM456
Mobile applications / Mobile firmware & hardware

PM6250
Mobile applications / Mobile firmware & hardware

PM660
Mobile applications / Mobile firmware & hardware

PM660A
Mobile applications / Mobile firmware & hardware

PM660L
Mobile applications / Mobile firmware & hardware

PM670
Mobile applications / Mobile firmware & hardware

PM670A
Mobile applications / Mobile firmware & hardware

PM670L
Mobile applications / Mobile firmware & hardware

PM7150A
Mobile applications / Mobile firmware & hardware

PM7150L
Mobile applications / Mobile firmware & hardware

PM7250
Mobile applications / Mobile firmware & hardware

PM7350C
Mobile applications / Mobile firmware & hardware

PM8150
Mobile applications / Mobile firmware & hardware

PM8350B
Mobile applications / Mobile firmware & hardware

PM8350BH
Mobile applications / Mobile firmware & hardware

PM8350BHS
Mobile applications / Mobile firmware & hardware

PM8350C
Mobile applications / Mobile firmware & hardware

PM855A
Mobile applications / Mobile firmware & hardware

PM8937
Mobile applications / Mobile firmware & hardware

PMC1000H
Mobile applications / Mobile firmware & hardware

PMD9655AU
Mobile applications / Mobile firmware & hardware

PME605
Mobile applications / Mobile firmware & hardware

PMI8937
Mobile applications / Mobile firmware & hardware

PMK7350
Mobile applications / Mobile firmware & hardware

PMK8350
Mobile applications / Mobile firmware & hardware

PMM6155AU
Mobile applications / Mobile firmware & hardware

PMM8155AU
Mobile applications / Mobile firmware & hardware

PMM8996AU
Mobile applications / Mobile firmware & hardware

PMR735A
Mobile applications / Mobile firmware & hardware

PMR735B
Mobile applications / Mobile firmware & hardware

PMX20
Mobile applications / Mobile firmware & hardware

PMX50
Mobile applications / Mobile firmware & hardware

QAT3514
Mobile applications / Mobile firmware & hardware

QAT3516
Mobile applications / Mobile firmware & hardware

QAT3518
Mobile applications / Mobile firmware & hardware

QAT3519
Mobile applications / Mobile firmware & hardware

QAT3555
Mobile applications / Mobile firmware & hardware

QAT5515
Mobile applications / Mobile firmware & hardware

QAT5516
Mobile applications / Mobile firmware & hardware

QAT5522
Mobile applications / Mobile firmware & hardware

QAT5533
Mobile applications / Mobile firmware & hardware

QAT5568
Mobile applications / Mobile firmware & hardware

QBT1000
Mobile applications / Mobile firmware & hardware

QCA6310
Mobile applications / Mobile firmware & hardware

QCA6320
Mobile applications / Mobile firmware & hardware

QCA6335
Mobile applications / Mobile firmware & hardware

QCA6564
Mobile applications / Mobile firmware & hardware

QCA6564A
Mobile applications / Mobile firmware & hardware

QCA6564AU
Mobile applications / Mobile firmware & hardware

QCA6574
Mobile applications / Mobile firmware & hardware

QCA6574A
Mobile applications / Mobile firmware & hardware

QCA6584AU
Mobile applications / Mobile firmware & hardware

QCA6595AU
Mobile applications / Mobile firmware & hardware

QCA6696
Mobile applications / Mobile firmware & hardware

QCA8337
Mobile applications / Mobile firmware & hardware

QCM6125
Mobile applications / Mobile firmware & hardware

QCS410
Mobile applications / Mobile firmware & hardware

QCS603
Mobile applications / Mobile firmware & hardware

QCS610
Mobile applications / Mobile firmware & hardware

QCS6125
Mobile applications / Mobile firmware & hardware

QDM2301
Mobile applications / Mobile firmware & hardware

QDM2302
Mobile applications / Mobile firmware & hardware

QDM2305
Mobile applications / Mobile firmware & hardware

QDM2307
Mobile applications / Mobile firmware & hardware

QDM2308
Mobile applications / Mobile firmware & hardware

QDM2310
Mobile applications / Mobile firmware & hardware

QDM3301
Mobile applications / Mobile firmware & hardware

QDM3302
Mobile applications / Mobile firmware & hardware

QDM4643
Mobile applications / Mobile firmware & hardware

QDM4650
Mobile applications / Mobile firmware & hardware

QDM5579
Mobile applications / Mobile firmware & hardware

QDM5620
Mobile applications / Mobile firmware & hardware

QDM5621
Mobile applications / Mobile firmware & hardware

QDM5650
Mobile applications / Mobile firmware & hardware

QDM5652
Mobile applications / Mobile firmware & hardware

QDM5670
Mobile applications / Mobile firmware & hardware

QDM5671
Mobile applications / Mobile firmware & hardware

QDM5677
Mobile applications / Mobile firmware & hardware

QDM5679
Mobile applications / Mobile firmware & hardware

QET4100
Mobile applications / Mobile firmware & hardware

QET5100M
Mobile applications / Mobile firmware & hardware

QET6110
Mobile applications / Mobile firmware & hardware

QFE2101
Mobile applications / Mobile firmware & hardware

QFE2520
Mobile applications / Mobile firmware & hardware

QFE2550
Mobile applications / Mobile firmware & hardware

QFE3340
Mobile applications / Mobile firmware & hardware

QFE4301
Mobile applications / Mobile firmware & hardware

QFE4302
Mobile applications / Mobile firmware & hardware

QFE4303
Mobile applications / Mobile firmware & hardware

QFE4305
Mobile applications / Mobile firmware & hardware

QFE4308
Mobile applications / Mobile firmware & hardware

QFE4309
Mobile applications / Mobile firmware & hardware

QFE4320
Mobile applications / Mobile firmware & hardware

QFE4373FC
Mobile applications / Mobile firmware & hardware

QFS2608
Mobile applications / Mobile firmware & hardware

QFS2630
Mobile applications / Mobile firmware & hardware

QLN1020
Mobile applications / Mobile firmware & hardware

QLN1021AQ
Mobile applications / Mobile firmware & hardware

QLN1030
Mobile applications / Mobile firmware & hardware

QLN1031
Mobile applications / Mobile firmware & hardware

QLN1036AQ
Mobile applications / Mobile firmware & hardware

QLN4640
Mobile applications / Mobile firmware & hardware

QLN4642
Mobile applications / Mobile firmware & hardware

QLN4650
Mobile applications / Mobile firmware & hardware

QLN5020
Mobile applications / Mobile firmware & hardware

QLN5030
Mobile applications / Mobile firmware & hardware

QLN5040
Mobile applications / Mobile firmware & hardware

QPA2625
Mobile applications / Mobile firmware & hardware

QPA4340
Mobile applications / Mobile firmware & hardware

QPA4361
Mobile applications / Mobile firmware & hardware

QPA5373
Mobile applications / Mobile firmware & hardware

QPA5461
Mobile applications / Mobile firmware & hardware

QPA5580
Mobile applications / Mobile firmware & hardware

QPA5581
Mobile applications / Mobile firmware & hardware

QPA8673
Mobile applications / Mobile firmware & hardware

QPA8675
Mobile applications / Mobile firmware & hardware

QPA8686
Mobile applications / Mobile firmware & hardware

QPA8801
Mobile applications / Mobile firmware & hardware

QPA8802
Mobile applications / Mobile firmware & hardware

QPA8803
Mobile applications / Mobile firmware & hardware

QPA8821
Mobile applications / Mobile firmware & hardware

QPA8842
Mobile applications / Mobile firmware & hardware

QPM2630
Mobile applications / Mobile firmware & hardware

QPM4621
Mobile applications / Mobile firmware & hardware

QPM4630
Mobile applications / Mobile firmware & hardware

QPM4640
Mobile applications / Mobile firmware & hardware

QPM4641
Mobile applications / Mobile firmware & hardware

QPM4650
Mobile applications / Mobile firmware & hardware

QPM5541
Mobile applications / Mobile firmware & hardware

QPM5577
Mobile applications / Mobile firmware & hardware

QPM5579
Mobile applications / Mobile firmware & hardware

QPM5620
Mobile applications / Mobile firmware & hardware

QPM5621
Mobile applications / Mobile firmware & hardware

QPM5641
Mobile applications / Mobile firmware & hardware

QPM5657
Mobile applications / Mobile firmware & hardware

QPM5658
Mobile applications / Mobile firmware & hardware

QPM5670
Mobile applications / Mobile firmware & hardware

QPM5677
Mobile applications / Mobile firmware & hardware

QPM5679
Mobile applications / Mobile firmware & hardware

QPM5870
Mobile applications / Mobile firmware & hardware

QPM5875
Mobile applications / Mobile firmware & hardware

QPM6325
Mobile applications / Mobile firmware & hardware

QPM6375
Mobile applications / Mobile firmware & hardware

QPM6582
Mobile applications / Mobile firmware & hardware

QPM6585
Mobile applications / Mobile firmware & hardware

QPM6621
Mobile applications / Mobile firmware & hardware

QPM6670
Mobile applications / Mobile firmware & hardware

QPM8820
Mobile applications / Mobile firmware & hardware

QPM8830
Mobile applications / Mobile firmware & hardware

QPM8870
Mobile applications / Mobile firmware & hardware

QPM8895
Mobile applications / Mobile firmware & hardware

QSM7250
Mobile applications / Mobile firmware & hardware

QSW6310
Mobile applications / Mobile firmware & hardware

QSW8573
Mobile applications / Mobile firmware & hardware

QTC800T
Mobile applications / Mobile firmware & hardware

QTM527
Mobile applications / Mobile firmware & hardware

RGR7640AU
Mobile applications / Mobile firmware & hardware

RSW8577
Mobile applications / Mobile firmware & hardware

SA2150P
Mobile applications / Mobile firmware & hardware

SA415M
Mobile applications / Mobile firmware & hardware

SA515M
Mobile applications / Mobile firmware & hardware

SA6145P
Mobile applications / Mobile firmware & hardware

SA6150P
Mobile applications / Mobile firmware & hardware

SA6155
Mobile applications / Mobile firmware & hardware

SA8150P
Mobile applications / Mobile firmware & hardware

SA8155
Mobile applications / Mobile firmware & hardware

SA8155P
Mobile applications / Mobile firmware & hardware

SD455
Mobile applications / Mobile firmware & hardware

SD429
Mobile applications / Mobile firmware & hardware

SD439
Mobile applications / Mobile firmware & hardware

SD632
Mobile applications / Mobile firmware & hardware

SD660
Mobile applications / Mobile firmware & hardware

SD678
Mobile applications / Mobile firmware & hardware

SD6905G
Mobile applications / Mobile firmware & hardware

SD720G
Mobile applications / Mobile firmware & hardware

SD750G
Mobile applications / Mobile firmware & hardware

SD765
Mobile applications / Mobile firmware & hardware

SD765G
Mobile applications / Mobile firmware & hardware

SD768G
Mobile applications / Mobile firmware & hardware

SDA429W
Mobile applications / Mobile firmware & hardware

SDR051
Mobile applications / Mobile firmware & hardware

SDR052
Mobile applications / Mobile firmware & hardware

SDR675
Mobile applications / Mobile firmware & hardware

SDW3100
Mobile applications / Mobile firmware & hardware

SDX20M
Mobile applications / Mobile firmware & hardware

SDX50M
Mobile applications / Mobile firmware & hardware

SDXR1
Mobile applications / Mobile firmware & hardware

SM6250
Mobile applications / Mobile firmware & hardware

SM6250P
Mobile applications / Mobile firmware & hardware

SM7250P
Mobile applications / Mobile firmware & hardware

SM7350
Mobile applications / Mobile firmware & hardware

SMB1350
Mobile applications / Mobile firmware & hardware

SMB1357
Mobile applications / Mobile firmware & hardware

SMB1380
Mobile applications / Mobile firmware & hardware

SMB1381
Mobile applications / Mobile firmware & hardware

SMB1394
Mobile applications / Mobile firmware & hardware

SMB1395
Mobile applications / Mobile firmware & hardware

SMB1398
Mobile applications / Mobile firmware & hardware

SMB2351
Mobile applications / Mobile firmware & hardware

SMB358S
Mobile applications / Mobile firmware & hardware

WCD9335
Mobile applications / Mobile firmware & hardware

WCD9371
Mobile applications / Mobile firmware & hardware

WCN3610
Mobile applications / Mobile firmware & hardware

WCN3620
Mobile applications / Mobile firmware & hardware

WCN3660
Mobile applications / Mobile firmware & hardware

WCN6740
Mobile applications / Mobile firmware & hardware

WCN6850
Mobile applications / Mobile firmware & hardware

WCN6851
Mobile applications / Mobile firmware & hardware

WCN6855
Mobile applications / Mobile firmware & hardware

WCN6856
Mobile applications / Mobile firmware & hardware

WSA8830
Mobile applications / Mobile firmware & hardware

WSA8835
Mobile applications / Mobile firmware & hardware

WTR2955
Mobile applications / Mobile firmware & hardware

WTR4905
Mobile applications / Mobile firmware & hardware

WTR6955
Mobile applications / Mobile firmware & hardware

PMM8920AU
Mobile applications / Mobile firmware & hardware

PMW3100
Mobile applications / Mobile firmware & hardware

QCA4020
Mobile applications / Mobile firmware & hardware

QCA6174
Mobile applications / Mobile firmware & hardware

QCC1110
Mobile applications / Mobile firmware & hardware

QFE3100
Mobile applications / Mobile firmware & hardware

QSM8250
Mobile applications / Mobile firmware & hardware

SDR845
Mobile applications / Mobile firmware & hardware

SDW2500
Mobile applications / Mobile firmware & hardware

AR9380
Mobile applications / Mobile firmware & hardware

CSR8811
Mobile applications / Mobile firmware & hardware

IPQ4018
Mobile applications / Mobile firmware & hardware

IPQ4028
Mobile applications / Mobile firmware & hardware

IPQ4029
Mobile applications / Mobile firmware & hardware

IPQ6000
Mobile applications / Mobile firmware & hardware

IPQ6010
Mobile applications / Mobile firmware & hardware

IPQ6018
Mobile applications / Mobile firmware & hardware

IPQ6028
Mobile applications / Mobile firmware & hardware

IPQ8065
Mobile applications / Mobile firmware & hardware

IPQ8068
Mobile applications / Mobile firmware & hardware

IPQ8070
Mobile applications / Mobile firmware & hardware

IPQ8070A
Mobile applications / Mobile firmware & hardware

IPQ8071
Mobile applications / Mobile firmware & hardware

IPQ8071A
Mobile applications / Mobile firmware & hardware

IPQ8072
Mobile applications / Mobile firmware & hardware

IPQ8072A
Mobile applications / Mobile firmware & hardware

IPQ8074A
Mobile applications / Mobile firmware & hardware

IPQ8076
Mobile applications / Mobile firmware & hardware

IPQ8076A
Mobile applications / Mobile firmware & hardware

IPQ8078A
Mobile applications / Mobile firmware & hardware

IPQ8173
Mobile applications / Mobile firmware & hardware

IPQ8174
Mobile applications / Mobile firmware & hardware

QCA4024
Mobile applications / Mobile firmware & hardware

QCA6428
Mobile applications / Mobile firmware & hardware

QCA6438
Mobile applications / Mobile firmware & hardware

QCA7500
Mobile applications / Mobile firmware & hardware

QCA8075
Mobile applications / Mobile firmware & hardware

QCA8081
Mobile applications / Mobile firmware & hardware

QCA9880
Mobile applications / Mobile firmware & hardware

QCA9886
Mobile applications / Mobile firmware & hardware

QCA9888
Mobile applications / Mobile firmware & hardware

QCA9889
Mobile applications / Mobile firmware & hardware

QCA9898
Mobile applications / Mobile firmware & hardware

QCA9985
Mobile applications / Mobile firmware & hardware

QCA9990
Mobile applications / Mobile firmware & hardware

QCA9992
Mobile applications / Mobile firmware & hardware

QCA9994
Mobile applications / Mobile firmware & hardware

QCN5122
Mobile applications / Mobile firmware & hardware

QCN5152
Mobile applications / Mobile firmware & hardware

QCN5550
Mobile applications / Mobile firmware & hardware

WCN6750
Mobile applications / Mobile firmware & hardware

APQ8037
Mobile applications / Mobile firmware & hardware

IPQ5010
Mobile applications / Mobile firmware & hardware

IPQ5018
Mobile applications / Mobile firmware & hardware

IPQ6005
Mobile applications / Mobile firmware & hardware

IPQ8078
Mobile applications / Mobile firmware & hardware

MDM8207
Mobile applications / Mobile firmware & hardware

MDM9205
Mobile applications / Mobile firmware & hardware

MDM9207
Mobile applications / Mobile firmware & hardware

MDM9655
Mobile applications / Mobile firmware & hardware

MSM8108
Mobile applications / Mobile firmware & hardware

MSM8208
Mobile applications / Mobile firmware & hardware

MSM8209
Mobile applications / Mobile firmware & hardware

MSM8608
Mobile applications / Mobile firmware & hardware

PM8019
Mobile applications / Mobile firmware & hardware

PM8940
Mobile applications / Mobile firmware & hardware

PM8996
Mobile applications / Mobile firmware & hardware

PMI8940
Mobile applications / Mobile firmware & hardware

PMI8994
Mobile applications / Mobile firmware & hardware

PMI8996
Mobile applications / Mobile firmware & hardware

PMK8001
Mobile applications / Mobile firmware & hardware

PMP8074
Mobile applications / Mobile firmware & hardware

QCA4004
Mobile applications / Mobile firmware & hardware

QCA6175A
Mobile applications / Mobile firmware & hardware

QCA6234
Mobile applications / Mobile firmware & hardware

QCA6694
Mobile applications / Mobile firmware & hardware

QCA6694AU
Mobile applications / Mobile firmware & hardware

QCA8072
Mobile applications / Mobile firmware & hardware

QCC112
Mobile applications / Mobile firmware & hardware

QCN5021
Mobile applications / Mobile firmware & hardware

QCN5022
Mobile applications / Mobile firmware & hardware

QCN5024
Mobile applications / Mobile firmware & hardware

QCN5052
Mobile applications / Mobile firmware & hardware

QCN5054
Mobile applications / Mobile firmware & hardware

QCN5064
Mobile applications / Mobile firmware & hardware

QCN5121
Mobile applications / Mobile firmware & hardware

QCN5124
Mobile applications / Mobile firmware & hardware

QCN5154
Mobile applications / Mobile firmware & hardware

QCN5164
Mobile applications / Mobile firmware & hardware

QCN6023
Mobile applications / Mobile firmware & hardware

QCN6024
Mobile applications / Mobile firmware & hardware

QCN9000
Mobile applications / Mobile firmware & hardware

QCN9012
Mobile applications / Mobile firmware & hardware

QCN9022
Mobile applications / Mobile firmware & hardware

QCN9024
Mobile applications / Mobile firmware & hardware

QCN9070
Mobile applications / Mobile firmware & hardware

QCN9072
Mobile applications / Mobile firmware & hardware

QCN9074
Mobile applications / Mobile firmware & hardware

QCN9100
Mobile applications / Mobile firmware & hardware

QET4200AQ
Mobile applications / Mobile firmware & hardware

QFE2080FC
Mobile applications / Mobile firmware & hardware

QFE2081FC
Mobile applications / Mobile firmware & hardware

QFE2082FC
Mobile applications / Mobile firmware & hardware

QFE3320
Mobile applications / Mobile firmware & hardware

QFE3440FC
Mobile applications / Mobile firmware & hardware

QFE4455FC
Mobile applications / Mobile firmware & hardware

QFE4465FC
Mobile applications / Mobile firmware & hardware

QLN1035BD
Mobile applications / Mobile firmware & hardware

QPA8688
Mobile applications / Mobile firmware & hardware

QSM8350
Mobile applications / Mobile firmware & hardware

SC8180X+SDX55
Mobile applications / Mobile firmware & hardware

SD7c
Mobile applications / Mobile firmware & hardware

SD820
Mobile applications / Mobile firmware & hardware

SD821
Mobile applications / Mobile firmware & hardware

SDR105
Mobile applications / Mobile firmware & hardware

SMB358
Mobile applications / Mobile firmware & hardware

WCD9306
Mobile applications / Mobile firmware & hardware

WTR3905
Mobile applications / Mobile firmware & hardware

WTR3950
Mobile applications / Mobile firmware & hardware

WTR4605
Mobile applications / Mobile firmware & hardware

APQ8084
Mobile applications / Mobile firmware & hardware

CSR6030
Mobile applications / Mobile firmware & hardware

MDM9625
Mobile applications / Mobile firmware & hardware

MDM9635M
Mobile applications / Mobile firmware & hardware

MDM9645
Mobile applications / Mobile firmware & hardware

MSM8976
Mobile applications / Mobile firmware & hardware

MSM8976SG
Mobile applications / Mobile firmware & hardware

PM8952
Mobile applications / Mobile firmware & hardware

PM8956
Mobile applications / Mobile firmware & hardware

PMD9635
Mobile applications / Mobile firmware & hardware

PMD9645
Mobile applications / Mobile firmware & hardware

QCA6584
Mobile applications / Mobile firmware & hardware

QFE1035
Mobile applications / Mobile firmware & hardware

QFE1040
Mobile applications / Mobile firmware & hardware

QFE1045
Mobile applications / Mobile firmware & hardware

QFE1100
Mobile applications / Mobile firmware & hardware

QFE2340
Mobile applications / Mobile firmware & hardware

QFE3335
Mobile applications / Mobile firmware & hardware

QFE3345
Mobile applications / Mobile firmware & hardware

WFR1620
Mobile applications / Mobile firmware & hardware

WTR1625
Mobile applications / Mobile firmware & hardware

AR6003
Mobile applications / Mobile firmware & hardware

MDM8215
Mobile applications / Mobile firmware & hardware

MDM8215M
Mobile applications / Mobile firmware & hardware

MDM8615M
Mobile applications / Mobile firmware & hardware

MDM9215
Mobile applications / Mobile firmware & hardware

MDM9230
Mobile applications / Mobile firmware & hardware

MDM9310
Mobile applications / Mobile firmware & hardware

MDM9330
Mobile applications / Mobile firmware & hardware

MDM9615
Mobile applications / Mobile firmware & hardware

MDM9615M
Mobile applications / Mobile firmware & hardware

MDM9630
Mobile applications / Mobile firmware & hardware

PM8018
Mobile applications / Mobile firmware & hardware

WTR1605
Mobile applications / Mobile firmware & hardware

WTR1605L
Mobile applications / Mobile firmware & hardware

QCA9561
Mobile applications / Mobile firmware & hardware

QCA9563
Mobile applications / Mobile firmware & hardware

QCA9882
Mobile applications / Mobile firmware & hardware

QCA9887
Mobile applications / Mobile firmware & hardware

QCA9896
Mobile applications / Mobile firmware & hardware

QCA9982
Mobile applications / Mobile firmware & hardware

QCN5500
Mobile applications / Mobile firmware & hardware

QCN5502
Mobile applications / Mobile firmware & hardware

QCN7606
Mobile applications / Mobile firmware & hardware

PMX60
Mobile applications / Mobile firmware & hardware

APQ8016
Mobile applications / Mobile firmware & hardware

APQ8074
Mobile applications / Mobile firmware & hardware

APQ8094
Mobile applications / Mobile firmware & hardware

MDM9235M
Mobile applications / Mobile firmware & hardware

MDM9609
Mobile applications / Mobile firmware & hardware

MSM8216
Mobile applications / Mobile firmware & hardware

MSM8274
Mobile applications / Mobile firmware & hardware

MSM8674
Mobile applications / Mobile firmware & hardware

MSM8916
Mobile applications / Mobile firmware & hardware

MSM8929
Mobile applications / Mobile firmware & hardware

MSM8939
Mobile applications / Mobile firmware & hardware

MSM8974
Mobile applications / Mobile firmware & hardware

MSM8974P
Mobile applications / Mobile firmware & hardware

MSM8994
Mobile applications / Mobile firmware & hardware

PM8841
Mobile applications / Mobile firmware & hardware

PM8941
Mobile applications / Mobile firmware & hardware

PM8994
Mobile applications / Mobile firmware & hardware

QCA1990
Mobile applications / Mobile firmware & hardware

QFE1101
Mobile applications / Mobile firmware & hardware

QFE1520
Mobile applications / Mobile firmware & hardware

QFE1550
Mobile applications / Mobile firmware & hardware

QFE2310
Mobile applications / Mobile firmware & hardware

QFE2320
Mobile applications / Mobile firmware & hardware

QFE2330
Mobile applications / Mobile firmware & hardware

QFE2720
Mobile applications / Mobile firmware & hardware

WCN3660A
Mobile applications / Mobile firmware & hardware

WTR1625L
Mobile applications / Mobile firmware & hardware

WTR2605
Mobile applications / Mobile firmware & hardware

IPQ8069
Mobile applications / Mobile firmware & hardware

PMC7180
Mobile applications / Mobile firmware & hardware

QCA1062
Mobile applications / Mobile firmware & hardware

QCA1064
Mobile applications / Mobile firmware & hardware

QCA2066
Mobile applications / Mobile firmware & hardware

WCN6745
Mobile applications / Mobile firmware & hardware

Vendor Qualcomm

Security Bulletin

This security bulletin contains information about 20 vulnerabilities.

Updated: 20.05.2021

Added information about in-the-wild exploitation of vulnerabilities #3-4.

1) Integer overflow

EUVDB-ID: #VU52822

Risk: Low

CVSSv3.1: 6.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-1895

CWE-ID: CWE-190 - Integer overflow

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to integer overflow during system boot when flushing an image. A local user can execute arbitrary code with elevated privileges.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

APQ8009: All versions

APQ8053: All versions

MDM9206: All versions

PM215: All versions

PM8909: All versions

PM8916: All versions

PM8953: All versions

PMD9607: All versions

PMI8952: All versions

QCA9367: All versions

QCA9377: All versions

Qualcomm215: All versions

SMB1358: All versions

SMB1360: All versions

SMB231: All versions

WCD9326: All versions

WCD9330: All versions

WCN3615: All versions

WCN3660B: All versions

WCN3680: All versions

WCN3680B: All versions

WSA8810: All versions

WSA8815: All versions

WTR2965: All versions

External links

http://www.qualcomm.com/company/product-security/bulletins/may-2021-bulletin
http://source.codeaurora.org/quic/le/kernel/lk/commit/?id=6dcf0c38be38b659405a618e2066c7abd218ef21


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Buffer overflow

EUVDB-ID: #VU52809

Risk: Medium

CVSSv3.1: 6.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2020-11284

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a boundary error in QTEE. Locked memory can be unlocked and modified by non secure boot loader through improper system call sequence making the memory region untrusted source of input for secure boot loader.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

AQT1000: All versions

AR8035: All versions

PM3003A: All versions

PM4125: All versions

PM4250: All versions

PM6125: All versions

PM6150: All versions

PM6150A: All versions

PM6150L: All versions

PM6350: All versions

PM640A: All versions

PM640L: All versions

PM640P: All versions

PM7250B: All versions

PM8004: All versions

PM8005: All versions

PM8008: All versions

PM8009: All versions

PM8150A: All versions

PM8150B: All versions

PM8150C: All versions

PM8150L: All versions

PM8250: All versions

PM8350: All versions

PM855: All versions

PM855B: All versions

PM855L: All versions

PM855P: All versions

PM8998: All versions

PMD9655: All versions

PMI632: All versions

PMI8998: All versions

PMK8002: All versions

PMK8003: All versions

PMM8195AU: All versions

PMM855AU: All versions

PMR525: All versions

PMX24: All versions

PMX55: All versions

QAT3522: All versions

QAT3550: All versions

QBT1500: All versions

QBT2000: All versions

QCA6390: All versions

QCA6391: All versions

QCA6420: All versions

QCA6421: All versions

QCA6426: All versions

QCA6430: All versions

QCA6431: All versions

QCA6436: All versions

QCA6574AU: All versions

QCA6595: All versions

QCA9984: All versions

QCM2290: All versions

QCM4290: All versions

QCS2290: All versions

QCS405: All versions

QCS4290: All versions

QET4101: All versions

QET5100: All versions

QET6100: All versions

QET6105: All versions

QFS2530: All versions

QFS2580: All versions

QPA4360: All versions

QPA5460: All versions

QPA6560: All versions

QSW8574: All versions

QTC410S: All versions

QTC800H: All versions

QTC800S: All versions

QTC801S: All versions

QTM525: All versions

SA6155P: All versions

SA8195P: All versions

SD8C: All versions

SD8CX: All versions

SD460: All versions

SD480: All versions

SD662: All versions

SD675: All versions

SD855: All versions

SD8655G: All versions

SD870: All versions

SD8885G: All versions

SDM830: All versions

SDR425: All versions

SDR660: All versions

SDR660G: All versions

SDR735: All versions

SDR735G: All versions

SDR8150: All versions

SDR8250: All versions

SDR865: All versions

SDX24: All versions

SDX55: All versions

SDX55M: All versions

SDXR25G: All versions

SM4125: All versions

SMB1351: All versions

SMB1354: All versions

SMB1355: All versions

SMB1390: All versions

SMB1396: All versions

SMR525: All versions

SMR526: All versions

SMR545: All versions

SMR546: All versions

WCD9340: All versions

WCD9341: All versions

WCD9360: All versions

WCD9370: All versions

WCD9375: All versions

WCD9380: All versions

WCD9385: All versions

WCN3910: All versions

WCN3950: All versions

WCN3980: All versions

WCN3988: All versions

WCN3990: All versions

WCN3991: All versions

WCN3998: All versions

WCN3999: All versions

WGR7640: All versions

WHS9410: All versions

WSA8810: All versions

WSA8815: All versions

WTR2965: All versions

WTR3925: All versions

WTR5975: All versions

External links

http://www.qualcomm.com/company/product-security/bulletins/may-2021-bulletin


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

3) Detection of Error Condition Without Action

EUVDB-ID: #VU52821

Risk: Medium

CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-1906

CWE-ID: N/A

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper error handling within the Graphics component. A local user can trigger a new GPU address allocation failure and perform a denial of service attack.

Note, the vulnerability is being used in limited targeted attacks.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

APQ8009: All versions

APQ8009W: All versions

APQ8017: All versions

APQ8053: All versions

APQ8064AU: All versions

APQ8096AU: All versions

AQT1000: All versions

AR8031: All versions

AR8035: All versions

AR8151: All versions

CSRA6620: All versions

CSRA6640: All versions

CSRB31024: All versions

FSM10055: All versions

FSM10056: All versions

MDM9150: All versions

MDM9206: All versions

MDM9250: All versions

MDM9607: All versions

MDM9626: All versions

MDM9628: All versions

MDM9650: All versions

MSM8909W: All versions

MSM8917: All versions

MSM8953: All versions

MSM8996AU: All versions

PM215: All versions

PM3003A: All versions

PM4125: All versions

PM4250: All versions

PM439: All versions

PM456: All versions

PM6125: All versions

PM6150: All versions

PM6150A: All versions

PM6150L: All versions

PM6250: All versions

PM6350: All versions

PM640A: All versions

PM640L: All versions

PM640P: All versions

PM660: All versions

PM660A: All versions

PM660L: All versions

PM670: All versions

PM670A: All versions

PM670L: All versions

PM7150A: All versions

PM7150L: All versions

PM7250: All versions

PM7250B: All versions

PM7350C: All versions

PM8004: All versions

PM8005: All versions

PM8008: All versions

PM8009: All versions

PM8150: All versions

PM8150A: All versions

PM8150B: All versions

PM8150C: All versions

PM8150L: All versions

PM8250: All versions

PM8350: All versions

PM8350B: All versions

PM8350BH: All versions

PM8350BHS: All versions

PM8350C: All versions

PM855: All versions

PM855A: All versions

PM855B: All versions

PM855L: All versions

PM855P: All versions

PM8909: All versions

PM8916: All versions

PM8937: All versions

PM8953: All versions

PM8998: All versions

PMC1000H: All versions

PMD9607: All versions

PMD9655: All versions

PMD9655AU: All versions

PME605: All versions

PMI632: All versions

PMI8937: All versions

PMI8952: All versions

PMI8998: All versions

PMK7350: All versions

PMK8002: All versions

PMK8003: All versions

PMK8350: All versions

PMM6155AU: All versions

PMM8155AU: All versions

PMM8195AU: All versions

PMM855AU: All versions

PMM8996AU: All versions

PMR525: All versions

PMR735A: All versions

PMR735B: All versions

PMX20: All versions

PMX24: All versions

PMX50: All versions

PMX55: All versions

QAT3514: All versions

QAT3516: All versions

QAT3518: All versions

QAT3519: All versions

QAT3522: All versions

QAT3550: All versions

QAT3555: All versions

QAT5515: All versions

QAT5516: All versions

QAT5522: All versions

QAT5533: All versions

QAT5568: All versions

QBT1000: All versions

QBT1500: All versions

QBT2000: All versions

QCA6174A: All versions

QCA6310: All versions

QCA6320: All versions

QCA6335: All versions

QCA6390: All versions

QCA6391: All versions

QCA6420: All versions

QCA6426: All versions

QCA6430: All versions

QCA6436: All versions

QCA6564: All versions

QCA6564A: All versions

QCA6564AU: All versions

QCA6574: All versions

QCA6574A: All versions

QCA6574AU: All versions

QCA6584AU: All versions

QCA6595AU: All versions

QCA6696: All versions

QCA8337: All versions

QCA9367: All versions

QCA9377: All versions

QCM2290: All versions

QCM4290: All versions

QCM6125: All versions

QCS2290: All versions

QCS405: All versions

QCS410: All versions

QCS4290: All versions

QCS603: All versions

QCS605: All versions

QCS610: All versions

QCS6125: All versions

QDM2301: All versions

QDM2302: All versions

QDM2305: All versions

QDM2307: All versions

QDM2308: All versions

QDM2310: All versions

QDM3301: All versions

QDM3302: All versions

QDM4643: All versions

QDM4650: All versions

QDM5579: All versions

QDM5620: All versions

QDM5621: All versions

QDM5650: All versions

QDM5652: All versions

QDM5670: All versions

QDM5671: All versions

QDM5677: All versions

QDM5679: All versions

QET4100: All versions

QET4101: All versions

QET5100: All versions

QET5100M: All versions

QET6100: All versions

QET6105: All versions

QET6110: All versions

QFE2101: All versions

QFE2520: All versions

QFE2550: All versions

QFE3340: All versions

QFE4301: All versions

QFE4302: All versions

QFE4303: All versions

QFE4305: All versions

QFE4308: All versions

QFE4309: All versions

QFE4320: All versions

QFE4373FC: All versions

QFS2530: All versions

QFS2580: All versions

QFS2608: All versions

QFS2630: All versions

QLN1020: All versions

QLN1021AQ: All versions

QLN1030: All versions

QLN1031: All versions

QLN1036AQ: All versions

QLN4640: All versions

QLN4642: All versions

QLN4650: All versions

QLN5020: All versions

QLN5030: All versions

QLN5040: All versions

QPA2625: All versions

QPA4340: All versions

QPA4360: All versions

QPA4361: All versions

QPA5373: All versions

QPA5460: All versions

QPA5461: All versions

QPA5580: All versions

QPA5581: All versions

QPA6560: All versions

QPA8673: All versions

QPA8675: All versions

QPA8686: All versions

QPA8801: All versions

QPA8802: All versions

QPA8803: All versions

QPA8821: All versions

QPA8842: All versions

QPM2630: All versions

QPM4621: All versions

QPM4630: All versions

QPM4640: All versions

QPM4641: All versions

QPM4650: All versions

QPM5541: All versions

QPM5577: All versions

QPM5579: All versions

QPM5620: All versions

QPM5621: All versions

QPM5641: All versions

QPM5657: All versions

QPM5658: All versions

QPM5670: All versions

QPM5677: All versions

QPM5679: All versions

QPM5870: All versions

QPM5875: All versions

QPM6325: All versions

QPM6375: All versions

QPM6582: All versions

QPM6585: All versions

QPM6621: All versions

QPM6670: All versions

QPM8820: All versions

QPM8830: All versions

QPM8870: All versions

QPM8895: All versions

QSM7250: All versions

QSW6310: All versions

QSW8573: All versions

QSW8574: All versions

QTC410S: All versions

QTC800H: All versions

QTC800S: All versions

QTC800T: All versions

QTC801S: All versions

QTM525: All versions

QTM527: All versions

Qualcomm215: All versions

RGR7640AU: All versions

RSW8577: All versions

SA2150P: All versions

SA415M: All versions

SA515M: All versions

SA6145P: All versions

SA6150P: All versions

SA6155: All versions

SA6155P: All versions

SA8150P: All versions

SA8155: All versions

SA8155P: All versions

SA8195P: All versions

SD455: All versions

SD636: All versions

SD675: All versions

SD8C: All versions

SD8CX: All versions

SD205: All versions

SD210: All versions

SD429: All versions

SD439: All versions

SD450: All versions

SD460: All versions

SD480: All versions

SD632: All versions

SD660: All versions

SD662: All versions

SD665: All versions

SD670: All versions

SD678: All versions

SD6905G: All versions

SD710: All versions

SD720G: All versions

SD730: All versions

SD750G: All versions

SD765: All versions

SD765G: All versions

SD768G: All versions

SD835: All versions

SD845: All versions

SD855: All versions

SD8655G: All versions

SD870: All versions

SD888: All versions

SD8885G: All versions

SDA429W: All versions

SDM429W: All versions

SDM630: All versions

SDM830: All versions

SDR051: All versions

SDR052: All versions

SDR425: All versions

SDR660: All versions

SDR660G: All versions

SDR675: All versions

SDR735: All versions

SDR735G: All versions

SDR8150: All versions

SDR8250: All versions

SDR865: All versions

SDW3100: All versions

SDX20: All versions

SDX20M: All versions

SDX24: All versions

SDX50M: All versions

SDX55: All versions

SDX55M: All versions

SDXR1: All versions

SDXR25G: All versions

SM4125: All versions

SM6250: All versions

SM6250P: All versions

SM7250P: All versions

SM7350: All versions

SMB1350: All versions

SMB1351: All versions

SMB1354: All versions

SMB1355: All versions

SMB1357: All versions

SMB1358: All versions

SMB1360: All versions

SMB1380: All versions

SMB1381: All versions

SMB1390: All versions

SMB1394: All versions

SMB1395: All versions

SMB1396: All versions

SMB1398: All versions

SMB231: All versions

SMB2351: All versions

SMB358S: All versions

SMR525: All versions

SMR526: All versions

SMR545: All versions

SMR546: All versions

WCD9326: All versions

WCD9330: All versions

WCD9335: All versions

WCD9340: All versions

WCD9341: All versions

WCD9360: All versions

WCD9370: All versions

WCD9371: All versions

WCD9375: All versions

WCD9380: All versions

WCD9385: All versions

WCN3610: All versions

WCN3615: All versions

WCN3620: All versions

WCN3660: All versions

WCN3660B: All versions

WCN3680: All versions

WCN3680B: All versions

WCN3910: All versions

WCN3950: All versions

WCN3980: All versions

WCN3988: All versions

WCN3990: All versions

WCN3991: All versions

WCN3998: All versions

WCN3999: All versions

WCN6740: All versions

WCN6850: All versions

WCN6851: All versions

WCN6855: All versions

WCN6856: All versions

WGR7640: All versions

WSA8810: All versions

WSA8815: All versions

WSA8830: All versions

WSA8835: All versions

WTR2955: All versions

WTR2965: All versions

WTR3925: All versions

WTR4905: All versions

WTR5975: All versions

WTR6955: All versions

External links

http://www.qualcomm.com/company/product-security/bulletins/may-2021-bulletin
http://source.codeaurora.org/quic/la/kernel/msm-4.14/commit?id=2a576c81c8dfb800a239e60a1ee3352a0fb7...
http://source.android.com/security/bulletin/2021-05-01


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

4) Use-after-free

EUVDB-ID: #VU52818

Risk: Medium

CVSSv3.1: 6.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-1905

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system

The vulnerability exists due to a use-after-free error in Graphics component when handling memory mapping of multiple processes simultaneously. A local user can escalate privileges on the system.

Note, the vulnerability is being used in limited targeted attacks.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

APQ8009: All versions

APQ8009W: All versions

APQ8017: All versions

APQ8053: All versions

APQ8064AU: All versions

APQ8096AU: All versions

AQT1000: All versions

AR8031: All versions

AR8035: All versions

AR8151: All versions

CSRA6620: All versions

CSRA6640: All versions

FSM10055: All versions

FSM10056: All versions

MDM9206: All versions

MDM9607: All versions

MDM9626: All versions

MDM9628: All versions

MDM9650: All versions

MSM8909W: All versions

MSM8917: All versions

MSM8953: All versions

MSM8996AU: All versions

PM215: All versions

PM3003A: All versions

PM4125: All versions

PM4250: All versions

PM439: All versions

PM456: All versions

PM6125: All versions

PM6150: All versions

PM6150A: All versions

PM6150L: All versions

PM6250: All versions

PM6350: All versions

PM640A: All versions

PM640L: All versions

PM640P: All versions

PM660: All versions

PM660A: All versions

PM660L: All versions

PM670: All versions

PM670A: All versions

PM670L: All versions

PM7150A: All versions

PM7150L: All versions

PM7250: All versions

PM7250B: All versions

PM8004: All versions

PM8005: All versions

PM8008: All versions

PM8009: All versions

PM8150: All versions

PM8150A: All versions

PM8150B: All versions

PM8150C: All versions

PM8150L: All versions

PM8250: All versions

PM8350: All versions

PM8350B: All versions

PM8350BH: All versions

PM8350C: All versions

PM855: All versions

PM855A: All versions

PM855B: All versions

PM855L: All versions

PM855P: All versions

PM8909: All versions

PM8916: All versions

PM8937: All versions

PM8953: All versions

PM8998: All versions

PMC1000H: All versions

PMD9607: All versions

PMD9655: All versions

PME605: All versions

PMI632: All versions

PMI8937: All versions

PMI8952: All versions

PMI8998: All versions

PMK8002: All versions

PMK8003: All versions

PMK8350: All versions

PMM6155AU: All versions

PMM8155AU: All versions

PMM8195AU: All versions

PMM855AU: All versions

PMM8920AU: All versions

PMM8996AU: All versions

PMR525: All versions

PMR735A: All versions

PMR735B: All versions

PMW3100: All versions

PMX20: All versions

PMX24: All versions

PMX50: All versions

PMX55: All versions

QAT3514: All versions

QAT3516: All versions

QAT3518: All versions

QAT3519: All versions

QAT3522: All versions

QAT3550: All versions

QAT3555: All versions

QAT5515: All versions

QAT5516: All versions

QAT5522: All versions

QAT5533: All versions

QAT5568: All versions

QBT1000: All versions

QBT1500: All versions

QBT2000: All versions

QCA4020: All versions

QCA6174: All versions

QCA6174A: All versions

QCA6310: All versions

QCA6320: All versions

QCA6335: All versions

QCA6390: All versions

QCA6391: All versions

QCA6420: All versions

QCA6421: All versions

QCA6426: All versions

QCA6430: All versions

QCA6431: All versions

QCA6436: All versions

QCA6564: All versions

QCA6564A: All versions

QCA6564AU: All versions

QCA6574: All versions

QCA6574A: All versions

QCA6574AU: All versions

QCA6584AU: All versions

QCA6595AU: All versions

QCA6696: All versions

QCA8337: All versions

QCA9367: All versions

QCA9377: All versions

QCA9379: All versions

QCC1110: All versions

QCM2290: All versions

QCM4290: All versions

QCM6125: All versions

QCS2290: All versions

QCS405: All versions

QCS410: All versions

QCS4290: All versions

QCS603: All versions

QCS605: All versions

QCS610: All versions

QCS6125: All versions

QDM2301: All versions

QDM2302: All versions

QDM2305: All versions

QDM2307: All versions

QDM2308: All versions

QDM2310: All versions

QDM3301: All versions

QDM4643: All versions

QDM4650: All versions

QDM5620: All versions

QDM5621: All versions

QDM5650: All versions

QDM5652: All versions

QDM5670: All versions

QDM5671: All versions

QDM5677: All versions

QDM5679: All versions

QET4100: All versions

QET4101: All versions

QET5100: All versions

QET5100M: All versions

QET6100: All versions

QET6105: All versions

QET6110: All versions

QFE2101: All versions

QFE2520: All versions

QFE2550: All versions

QFE3100: All versions

QFE3340: All versions

QFE4301: All versions

QFE4302: All versions

QFE4303: All versions

QFE4305: All versions

QFE4308: All versions

QFE4309: All versions

QFE4320: All versions

QFE4373FC: All versions

QFS2530: All versions

QFS2580: All versions

QFS2608: All versions

QFS2630: All versions

QLN1020: All versions

QLN1030: All versions

QLN4640: All versions

QLN4642: All versions

QLN4650: All versions

QLN5020: All versions

QLN5030: All versions

QLN5040: All versions

QPA2625: All versions

QPA4340: All versions

QPA4360: All versions

QPA4361: All versions

QPA5373: All versions

QPA5460: All versions

QPA5461: All versions

QPA5580: All versions

QPA5581: All versions

QPA6560: All versions

QPA8673: All versions

QPA8675: All versions

QPA8686: All versions

QPA8801: All versions

QPA8802: All versions

QPA8803: All versions

QPA8821: All versions

QPA8842: All versions

QPM2630: All versions

QPM4621: All versions

QPM4630: All versions

QPM4640: All versions

QPM4641: All versions

QPM4650: All versions

QPM5541: All versions

QPM5577: All versions

QPM5579: All versions

QPM5620: All versions

QPM5621: All versions

QPM5641: All versions

QPM5657: All versions

QPM5658: All versions

QPM5670: All versions

QPM5677: All versions

QPM5679: All versions

QPM5870: All versions

QPM5875: All versions

QPM6325: All versions

QPM6375: All versions

QPM6582: All versions

QPM6585: All versions

QPM6621: All versions

QPM6670: All versions

QPM8820: All versions

QPM8830: All versions

QPM8870: All versions

QPM8895: All versions

QSM7250: All versions

QSM8250: All versions

QSW6310: All versions

QSW8573: All versions

QSW8574: All versions

QTC410S: All versions

QTC800H: All versions

QTC800S: All versions

QTC800T: All versions

QTC801S: All versions

QTM525: All versions

QTM527: All versions

Qualcomm215: All versions

RGR7640AU: All versions

RSW8577: All versions

SA2150P: All versions

SA515M: All versions

SA6145P: All versions

SA6150P: All versions

SA6155: All versions

SA6155P: All versions

SA8150P: All versions

SA8155: All versions

SA8155P: All versions

SA8195P: All versions

SD455: All versions

SD636: All versions

SD675: All versions

SD8C: All versions

SD8CX: All versions

SD205: All versions

SD210: All versions

SD429: All versions

SD439: All versions

SD450: All versions

SD460: All versions

SD480: All versions

SD632: All versions

SD660: All versions

SD662: All versions

SD665: All versions

SD670: All versions

SD678: All versions

SD6905G: All versions

SD710: All versions

SD720G: All versions

SD730: All versions

SD750G: All versions

SD765: All versions

SD765G: All versions

SD768G: All versions

SD835: All versions

SD845: All versions

SD855: All versions

SD8655G: All versions

SD870: All versions

SD888: All versions

SD8885G: All versions

SDA429W: All versions

SDM429W: All versions

SDM630: All versions

SDM830: All versions

SDR051: All versions

SDR052: All versions

SDR425: All versions

SDR660: All versions

SDR660G: All versions

SDR675: All versions

SDR735: All versions

SDR735G: All versions

SDR8150: All versions

SDR8250: All versions

SDR845: All versions

SDR865: All versions

SDW2500: All versions

SDW3100: All versions

SDX20: All versions

SDX20M: All versions

SDX24: All versions

SDX50M: All versions

SDX55: All versions

SDX55M: All versions

SDXR1: All versions

SDXR25G: All versions

SM4125: All versions

SM6250: All versions

SM6250P: All versions

SM7250P: All versions

SMB1350: All versions

SMB1351: All versions

SMB1354: All versions

SMB1355: All versions

SMB1357: All versions

SMB1358: All versions

SMB1360: All versions

SMB1380: All versions

SMB1381: All versions

SMB1390: All versions

SMB1395: All versions

SMB1396: All versions

SMB1398: All versions

SMB231: All versions

SMB2351: All versions

SMB358S: All versions

SMR525: All versions

SMR526: All versions

SMR545: All versions

SMR546: All versions

WCD9326: All versions

WCD9330: All versions

WCD9335: All versions

WCD9340: All versions

WCD9341: All versions

WCD9360: All versions

WCD9370: All versions

WCD9371: All versions

WCD9375: All versions

WCD9380: All versions

WCD9385: All versions

WCN3610: All versions

WCN3615: All versions

WCN3620: All versions

WCN3660: All versions

WCN3660B: All versions

WCN3680: All versions

WCN3680B: All versions

WCN3910: All versions

WCN3950: All versions

WCN3980: All versions

WCN3988: All versions

WCN3990: All versions

WCN3991: All versions

WCN3998: All versions

WCN3999: All versions

WCN6850: All versions

WCN6851: All versions

WCN6855: All versions

WCN6856: All versions

WGR7640: All versions

WSA8810: All versions

WSA8815: All versions

WSA8830: All versions

WSA8835: All versions

WTR2955: All versions

WTR2965: All versions

WTR3925: All versions

WTR4905: All versions

WTR5975: All versions

WTR6955: All versions

External links

http://www.qualcomm.com/company/product-security/bulletins/may-2021-bulletin
http://source.codeaurora.org/quic/la/kernel/msm-4.9/commit/?id=d236d315145f8250523ce9e14897d62e5d66...
http://source.android.com/security/bulletin/2021-05-01


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

5) Use-after-free

EUVDB-ID: #VU52817

Risk: Low

CVSSv3.1: 6.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-1891

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the Audio component. A local user can trigger a use-after-free error and execute arbitrary code with elevated privileges.


Mitigation

Install updates from vendor's website.

Vulnerable software versions

APQ8009W: All versions

APQ8017: All versions

APQ8053: All versions

AQT1000: All versions

AR8031: All versions

AR8035: All versions

AR9380: All versions

CSR8811: All versions

CSRA6620: All versions

CSRA6640: All versions

CSRB31024: All versions

IPQ4018: All versions

IPQ4028: All versions

IPQ4029: All versions

IPQ6000: All versions

IPQ6010: All versions

IPQ6018: All versions

IPQ6028: All versions

IPQ8064: All versions

IPQ8065: All versions

IPQ8068: All versions

IPQ8070: All versions

IPQ8070A: All versions

IPQ8071: All versions

IPQ8071A: All versions

IPQ8072: All versions

IPQ8072A: All versions

IPQ8074: All versions

IPQ8074A: All versions

IPQ8076: All versions

IPQ8076A: All versions

IPQ8078A: All versions

IPQ8173: All versions

IPQ8174: All versions

MSM8909W: All versions

MSM8917: All versions

MSM8953: All versions

PM215: All versions

PM3003A: All versions

PM4125: All versions

PM4250: All versions

PM439: All versions

PM456: All versions

PM6125: All versions

PM6150: All versions

PM6150A: All versions

PM6150L: All versions

PM6250: All versions

PM6350: All versions

PM640A: All versions

PM640L: All versions

PM640P: All versions

PM660: All versions

PM660A: All versions

PM660L: All versions

PM670: All versions

PM670A: All versions

PM670L: All versions

PM7150A: All versions

PM7150L: All versions

PM7250: All versions

PM7250B: All versions

PM7350C: All versions

PM8004: All versions

PM8005: All versions

PM8008: All versions

PM8009: All versions

PM8150: All versions

PM8150A: All versions

PM8150B: All versions

PM8150C: All versions

PM8150L: All versions

PM8250: All versions

PM8350: All versions

PM8350B: All versions

PM8350BH: All versions

PM8350BHS: All versions

PM8350C: All versions

PM855: All versions

PM855B: All versions

PM855L: All versions

PM855P: All versions

PM8909: All versions

PM8916: All versions

PM8937: All versions

PM8953: All versions

PM8998: All versions

PMC1000H: All versions

PMD9655: All versions

PME605: All versions

PMI632: All versions

PMI8937: All versions

PMI8952: All versions

PMI8998: All versions

PMK7350: All versions

PMK8002: All versions

PMK8003: All versions

PMK8350: All versions

PMM6155AU: All versions

PMM8155AU: All versions

PMM8195AU: All versions

PMM855AU: All versions

PMR525: All versions

PMR735A: All versions

PMR735B: All versions

PMW3100: All versions

PMX24: All versions

PMX50: All versions

PMX55: All versions

QAT3514: All versions

QAT3516: All versions

QAT3518: All versions

QAT3519: All versions

QAT3522: All versions

QAT3550: All versions

QAT3555: All versions

QAT5515: All versions

QAT5516: All versions

QAT5522: All versions

QAT5533: All versions

QAT5568: All versions

QBT1500: All versions

QBT2000: All versions

QCA4024: All versions

QCA6174A: All versions

QCA6310: All versions

QCA6335: All versions

QCA6390: All versions

QCA6391: All versions

QCA6420: All versions

QCA6421: All versions

QCA6426: All versions

QCA6428: All versions

QCA6430: All versions

QCA6431: All versions

QCA6436: All versions

QCA6438: All versions

QCA6564: All versions

QCA6564A: All versions

QCA6564AU: All versions

QCA6574: All versions

QCA6574A: All versions

QCA6574AU: All versions

QCA6584AU: All versions

QCA6595: All versions

QCA6595AU: All versions

QCA6696: All versions

QCA7500: All versions

QCA8075: All versions

QCA8081: All versions

QCA8337: All versions

QCA9377: All versions

QCA9880: All versions

QCA9886: All versions

QCA9888: All versions

QCA9889: All versions

QCA9898: All versions

QCA9980: All versions

QCA9984: All versions

QCA9985: All versions

QCA9990: All versions

QCA9992: All versions

QCA9994: All versions

QCC1110: All versions

QCM2290: All versions

QCM4290: All versions

QCM6125: All versions

QCN5122: All versions

QCN5152: All versions

QCN5550: All versions

QCS2290: All versions

QCS405: All versions

QCS410: All versions

QCS4290: All versions

QCS603: All versions

QCS605: All versions

QCS610: All versions

QCS6125: All versions

QDM2301: All versions

QDM2302: All versions

QDM2305: All versions

QDM2307: All versions

QDM2308: All versions

QDM2310: All versions

QDM3301: All versions

QDM3302: All versions

QDM4643: All versions

QDM4650: All versions

QDM5579: All versions

QDM5620: All versions

QDM5621: All versions

QDM5650: All versions

QDM5652: All versions

QDM5670: All versions

QDM5671: All versions

QDM5677: All versions

QDM5679: All versions

QET4100: All versions

QET4101: All versions

QET5100: All versions

QET5100M: All versions

QET6100: All versions

QET6105: All versions

QET6110: All versions

QFE2101: All versions

QFE2520: All versions

QFE2550: All versions

QFE3340: All versions

QFE4301: All versions

QFE4302: All versions

QFE4303: All versions

QFE4305: All versions

QFE4308: All versions

QFE4309: All versions

QFE4320: All versions

QFE4373FC: All versions

QFS2530: All versions

QFS2580: All versions

QFS2608: All versions

QFS2630: All versions

QLN1020: All versions

QLN1021AQ: All versions

QLN1030: All versions

QLN1031: All versions

QLN1036AQ: All versions

QLN4640: All versions

QLN4642: All versions

QLN4650: All versions

QLN5020: All versions

QLN5030: All versions

QLN5040: All versions

QPA2625: All versions

QPA4340: All versions

QPA4360: All versions

QPA4361: All versions

QPA5373: All versions

QPA5461: All versions

QPA5580: All versions

QPA5581: All versions

QPA6560: All versions

QPA8673: All versions

QPA8675: All versions

QPA8686: All versions

QPA8801: All versions

QPA8802: All versions

QPA8803: All versions

QPA8821: All versions

QPA8842: All versions

QPM2630: All versions

QPM4621: All versions

QPM4630: All versions

QPM4640: All versions

QPM4641: All versions

QPM4650: All versions

QPM5541: All versions

QPM5577: All versions

QPM5579: All versions

QPM5620: All versions

QPM5621: All versions

QPM5641: All versions

QPM5657: All versions

QPM5658: All versions

QPM5670: All versions

QPM5677: All versions

QPM5679: All versions

QPM5870: All versions

QPM5875: All versions

QPM6325: All versions

QPM6375: All versions

QPM6582: All versions

QPM6585: All versions

QPM6621: All versions

QPM6670: All versions

QPM8820: All versions

QPM8830: All versions

QPM8870: All versions

QPM8895: All versions

QSM7250: All versions

QSW6310: All versions

QSW8573: All versions

QSW8574: All versions

QTC410S: All versions

QTC800H: All versions

QTC800S: All versions

QTC801S: All versions

QTM525: All versions

QTM527: All versions

Qualcomm215: All versions

RSW8577: All versions

SA2150P: All versions

SA415M: All versions

SA515M: All versions

SA6145P: All versions

SA6150P: All versions

SA6155: All versions

SA6155P: All versions

SA8150P: All versions

SA8155: All versions

SA8155P: All versions

SA8195P: All versions

SD675: All versions

SD8C: All versions

SD8CX: All versions

SD205: All versions

SD210: All versions

SD429: All versions

SD439: All versions

SD450: All versions

SD460: All versions

SD480: All versions

SD632: All versions

SD660: All versions

SD662: All versions

SD665: All versions

SD670: All versions

SD678: All versions

SD6905G: All versions

SD710: All versions

SD720G: All versions

SD730: All versions

SD750G: All versions

SD765: All versions

SD765G: All versions

SD768G: All versions

SD845: All versions

SD855: All versions

SD8655G: All versions

SD870: All versions

SD888: All versions

SD8885G: All versions

SDA429W: All versions

SDM429W: All versions

SDR051: All versions

SDR052: All versions

SDR425: All versions

SDR660: All versions

SDR660G: All versions

SDR675: All versions

SDR735: All versions

SDR735G: All versions

SDR8150: All versions

SDR8250: All versions

SDR845: All versions

SDR865: All versions

SDW3100: All versions

SDX24: All versions

SDX50M: All versions

SDX55: All versions

SDX55M: All versions

SDXR1: All versions

SDXR25G: All versions

SM4125: All versions

SM6250: All versions

SM6250P: All versions

SM7250P: All versions

SM7350: All versions

SMB1351: All versions

SMB1354: All versions

SMB1355: All versions

SMB1358: All versions

SMB1360: All versions

SMB1380: All versions

SMB1381: All versions

SMB1390: All versions

SMB1394: All versions

SMB1395: All versions

SMB1396: All versions

SMB1398: All versions

SMB2351: All versions

SMR525: All versions

SMR526: All versions

SMR545: All versions

SMR546: All versions

WCD9326: All versions

WCD9335: All versions

WCD9340: All versions

WCD9341: All versions

WCD9360: All versions

WCD9370: All versions

WCD9371: All versions

WCD9375: All versions

WCD9380: All versions

WCD9385: All versions

WCN3610: All versions

WCN3615: All versions

WCN3620: All versions

WCN3660: All versions

WCN3660B: All versions

WCN3680: All versions

WCN3680B: All versions

WCN3910: All versions

WCN3950: All versions

WCN3980: All versions

WCN3988: All versions

WCN3990: All versions

WCN3991: All versions

WCN3998: All versions

WCN3999: All versions

WCN6740: All versions

WCN6750: All versions

WCN6850: All versions

WCN6851: All versions

WCN6856: All versions

WGR7640: All versions

WSA8810: All versions

WSA8815: All versions

WSA8830: All versions

WSA8835: All versions

WTR2955: All versions

WTR2965: All versions

WTR3925: All versions

WTR4905: All versions

WTR5975: All versions

WTR6955: All versions

External links

http://www.qualcomm.com/company/product-security/bulletins/may-2021-bulletin
http://source.codeaurora.org/quic/qsdk/platform/vendor/opensource/audio-kernel/commit/?id=ee913fe2a44fce7f0e4b0a9ad261416eabcd4add


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

6) Double Free

EUVDB-ID: #VU52813

Risk: High

CVSSv3.1: 7.7 [CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-1910

CWE-ID: CWE-415 - Double Free

Exploit availability: No

Description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error in Video component. A remote attacker can trick the victim to play a specially crafted video file, trigger a double free error and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

APQ8009: All versions

APQ8009W: All versions

APQ8017: All versions

APQ8053: All versions

APQ8064AU: All versions

APQ8096AU: All versions

AQT1000: All versions

AR8031: All versions

AR8151: All versions

CSRA6620: All versions

CSRA6640: All versions

FSM10055: All versions

FSM10056: All versions

MDM9206: All versions

MDM9650: All versions

MSM8909W: All versions

MSM8917: All versions

MSM8953: All versions

MSM8996AU: All versions

PM215: All versions

PM3003A: All versions

PM4125: All versions

PM4250: All versions

PM439: All versions

PM456: All versions

PM6125: All versions

PM6150: All versions

PM6150A: All versions

PM6150L: All versions

PM6250: All versions

PM6350: All versions

PM640A: All versions

PM640L: All versions

PM640P: All versions

PM660: All versions

PM660A: All versions

PM660L: All versions

PM670: All versions

PM670A: All versions

PM670L: All versions

PM7150A: All versions

PM7150L: All versions

PM7250: All versions

PM7250B: All versions

PM7350C: All versions

PM8004: All versions

PM8005: All versions

PM8008: All versions

PM8009: All versions

PM8150A: All versions

PM8150B: All versions

PM8150C: All versions

PM8150L: All versions

PM8250: All versions

PM8350: All versions

PM8350B: All versions

PM8350BH: All versions

PM8350BHS: All versions

PM8350C: All versions

PM855: All versions

PM855B: All versions

PM855L: All versions

PM855P: All versions

PM8909: All versions

PM8916: All versions

PM8937: All versions

PM8953: All versions

PM8998: All versions

PMD9607: All versions

PMD9655: All versions

PME605: All versions

PMI632: All versions

PMI8937: All versions

PMI8952: All versions

PMI8998: All versions

PMK7350: All versions

PMK8002: All versions

PMK8003: All versions

PMK8350: All versions

PMM6155AU: All versions

PMM8155AU: All versions

PMM8195AU: All versions

PMM855AU: All versions

PMM8996AU: All versions

PMR525: All versions

PMR735A: All versions

PMR735B: All versions

PMW3100: All versions

PMX20: All versions

PMX50: All versions

PMX55: All versions

QAT3514: All versions

QAT3516: All versions

QAT3518: All versions

QAT3519: All versions

QAT3522: All versions

QAT3550: All versions

QAT3555: All versions

QAT5515: All versions

QAT5516: All versions

QAT5522: All versions

QAT5533: All versions

QAT5568: All versions

QBT1500: All versions

QBT2000: All versions

QCA4020: All versions

QCA6174A: All versions

QCA6310: All versions

QCA6320: All versions

QCA6335: All versions

QCA6390: All versions

QCA6391: All versions

QCA6420: All versions

QCA6421: All versions

QCA6426: All versions

QCA6430: All versions

QCA6431: All versions

QCA6436: All versions

QCA6564: All versions

QCA6564A: All versions

QCA6564AU: All versions

QCA6574: All versions

QCA6574A: All versions

QCA6574AU: All versions

QCA6595AU: All versions

QCA6696: All versions

QCA9367: All versions

QCA9377: All versions

QCA9379: All versions

QCM2290: All versions

QCM4290: All versions

QCM6125: All versions

QCS2290: All versions

QCS405: All versions

QCS410: All versions

QCS4290: All versions

QCS603: All versions

QCS605: All versions

QCS610: All versions

QCS6125: All versions

QDM2301: All versions

QDM2302: All versions

QDM2305: All versions

QDM2307: All versions

QDM2308: All versions

QDM2310: All versions

QDM3301: All versions

QDM3302: All versions

QDM4643: All versions

QDM4650: All versions

QDM5579: All versions

QDM5620: All versions

QDM5621: All versions

QDM5650: All versions

QDM5652: All versions

QDM5670: All versions

QDM5671: All versions

QDM5677: All versions

QDM5679: All versions

QET4100: All versions

QET4101: All versions

QET5100: All versions

QET5100M: All versions

QET6100: All versions

QET6105: All versions

QET6110: All versions

QFE2101: All versions

QFE2520: All versions

QFE2550: All versions

QFE3340: All versions

QFE4301: All versions

QFE4302: All versions

QFE4303: All versions

QFE4305: All versions

QFE4308: All versions

QFE4309: All versions

QFE4320: All versions

QFE4373FC: All versions

QFS2530: All versions

QFS2580: All versions

QFS2608: All versions

QFS2630: All versions

QLN1020: All versions

QLN1030: All versions

QLN4640: All versions

QLN4642: All versions

QLN4650: All versions

QLN5020: All versions

QLN5030: All versions

QLN5040: All versions

QPA2625: All versions

QPA4340: All versions

QPA4360: All versions

QPA4361: All versions

QPA5373: All versions

QPA5460: All versions

QPA5461: All versions

QPA5580: All versions

QPA5581: All versions

QPA6560: All versions

QPA8673: All versions

QPA8675: All versions

QPA8686: All versions

QPA8801: All versions

QPA8802: All versions

QPA8803: All versions

QPA8821: All versions

QPA8842: All versions

QPM2630: All versions

QPM4621: All versions

QPM4630: All versions

QPM4640: All versions

QPM4641: All versions

QPM4650: All versions

QPM5620: All versions

QPM5621: All versions

QPM5641: All versions

QPM5657: All versions

QPM5658: All versions

QPM5670: All versions

QPM5677: All versions

QPM5679: All versions

QPM5870: All versions

QPM5875: All versions

QPM6582: All versions

QPM6585: All versions

QPM6621: All versions

QPM6670: All versions

QPM8820: All versions

QPM8830: All versions

QPM8870: All versions

QPM8895: All versions

QSM7250: All versions

QSW6310: All versions

QSW8573: All versions

QSW8574: All versions

QTC410S: All versions

QTC800H: All versions

QTC800S: All versions

QTC801S: All versions

QTM525: All versions

Qualcomm215: All versions

RGR7640AU: All versions

RSW8577: All versions

SA6145P: All versions

SA6150P: All versions

SA6155: All versions

SA6155P: All versions

SA8150P: All versions

SA8155: All versions

SA8155P: All versions

SA8195P: All versions

SD455: All versions

SD636: All versions

SD675: All versions

SD205: All versions

SD210: All versions

SD429: All versions

SD439: All versions

SD450: All versions

SD460: All versions

SD480: All versions

SD632: All versions

SD660: All versions

SD662: All versions

SD665: All versions

SD670: All versions

SD678: All versions

SD6905G: All versions

SD710: All versions

SD720G: All versions

SD730: All versions

SD750G: All versions

SD765: All versions

SD765G: All versions

SD768G: All versions

SD835: All versions

SD845: All versions

SD855: All versions

SD8655G: All versions

SD870: All versions

SD888: All versions

SD8885G: All versions

SDA429W: All versions

SDM429W: All versions

SDM630: All versions

SDM830: All versions

SDR051: All versions

SDR052: All versions

SDR425: All versions

SDR660: All versions

SDR660G: All versions

SDR675: All versions

SDR735: All versions

SDR735G: All versions

SDR8150: All versions

SDR8250: All versions

SDR845: All versions

SDR865: All versions

SDW2500: All versions

SDX20: All versions

SDX20M: All versions

SDX50M: All versions

SDX55: All versions

SDX55M: All versions

SDXR1: All versions

SDXR25G: All versions

SM4125: All versions

SM6250: All versions

SM6250P: All versions

SM7250P: All versions

SM7350: All versions

SMB1350: All versions

SMB1351: All versions

SMB1354: All versions

SMB1355: All versions

SMB1357: All versions

SMB1358: All versions

SMB1360: All versions

SMB1380: All versions

SMB1381: All versions

SMB1390: All versions

SMB1394: All versions

SMB1395: All versions

SMB1396: All versions

SMB1398: All versions

SMB231: All versions

SMR525: All versions

SMR526: All versions

SMR545: All versions

SMR546: All versions

WCD9326: All versions

WCD9330: All versions

WCD9335: All versions

WCD9340: All versions

WCD9341: All versions

WCD9370: All versions

WCD9371: All versions

WCD9375: All versions

WCD9380: All versions

WCD9385: All versions

WCN3610: All versions

WCN3615: All versions

WCN3620: All versions

WCN3660: All versions

WCN3660B: All versions

WCN3680: All versions

WCN3680B: All versions

WCN3910: All versions

WCN3950: All versions

WCN3980: All versions

WCN3988: All versions

WCN3990: All versions

WCN3991: All versions

WCN3998: All versions

WCN3999: All versions

WCN6740: All versions

WCN6750: All versions

WCN6850: All versions

WCN6851: All versions

WCN6855: All versions

WCN6856: All versions

WGR7640: All versions

WSA8810: All versions

WSA8815: All versions

WSA8830: All versions

WSA8835: All versions

WTR2955: All versions

WTR2965: All versions

WTR3925: All versions

WTR4905: All versions

WTR5975: All versions

WTR6955: All versions

External links

http://www.qualcomm.com/company/product-security/bulletins/may-2021-bulletin


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

7) Out-of-bounds write

EUVDB-ID: #VU52812

Risk: Low

CVSSv3.1: 6.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2020-11289

CWE-ID: CWE-787 - Out-of-bounds write

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a boundary error in TZ command handler within the Content Protection feature. A local user can pass a specially crafted command ID, trigger an out-of-bounds write and execute arbitrary code with elevated privileges.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

APQ8009: All versions

APQ8017: All versions

APQ8037: All versions

APQ8053: All versions

APQ8064AU: All versions

APQ8096AU: All versions

AQT1000: All versions

AR8031: All versions

AR8035: All versions

AR8151: All versions

CSR8811: All versions

CSRA6620: All versions

CSRA6640: All versions

CSRB31024: All versions

FSM10055: All versions

FSM10056: All versions

IPQ5010: All versions

IPQ5018: All versions

IPQ6000: All versions

IPQ6005: All versions

IPQ6010: All versions

IPQ6018: All versions

IPQ6028: All versions

IPQ8070: All versions

IPQ8070A: All versions

IPQ8071: All versions

IPQ8071A: All versions

IPQ8072: All versions

IPQ8072A: All versions

IPQ8074: All versions

IPQ8074A: All versions

IPQ8076: All versions

IPQ8076A: All versions

IPQ8078: All versions

IPQ8078A: All versions

IPQ8173: All versions

IPQ8174: All versions

MDM8207: All versions

MDM9150: All versions

MDM9205: All versions

MDM9206: All versions

MDM9207: All versions

MDM9250: All versions

MDM9607: All versions

MDM9628: All versions

MDM9640: All versions

MDM9650: All versions

MDM9655: All versions

MSM8108: All versions

MSM8208: All versions

MSM8209: All versions

MSM8608: All versions

MSM8917: All versions

MSM8920: All versions

MSM8937: All versions

MSM8940: All versions

MSM8953: All versions

MSM8996AU: All versions

PM215: All versions

PM3003A: All versions

PM4125: All versions

PM4250: All versions

PM439: All versions

PM456: All versions

PM6125: All versions

PM6150: All versions

PM6150A: All versions

PM6150L: All versions

PM6250: All versions

PM6350: All versions

PM640A: All versions

PM640L: All versions

PM640P: All versions

PM660: All versions

PM660A: All versions

PM660L: All versions

PM670: All versions

PM670A: All versions

PM670L: All versions

PM7150A: All versions

PM7150L: All versions

PM7250: All versions

PM7250B: All versions

PM8004: All versions

PM8005: All versions

PM8008: All versions

PM8009: All versions

PM8019: All versions

PM8150: All versions

PM8150A: All versions

PM8150B: All versions

PM8150C: All versions

PM8150L: All versions

PM8250: All versions

PM8350: All versions

PM8350B: All versions

PM8350BH: All versions

PM8350C: All versions

PM855: All versions

PM855A: All versions

PM855B: All versions

PM855L: All versions

PM855P: All versions

PM8909: All versions

PM8916: All versions

PM8937: All versions

PM8940: All versions

PM8953: All versions

PM8996: All versions

PM8998: All versions

PMC1000H: All versions

PMD9607: All versions

PMD9655: All versions

PMD9655AU: All versions

PME605: All versions

PMI632: All versions

PMI8937: All versions

PMI8940: All versions

PMI8952: All versions

PMI8994: All versions

PMI8996: All versions

PMI8998: All versions

PMK8001: All versions

PMK8002: All versions

PMK8003: All versions

PMK8350: All versions

PMM6155AU: All versions

PMM8155AU: All versions

PMM8195AU: All versions

PMM855AU: All versions

PMM8996AU: All versions

PMP8074: All versions

PMR525: All versions

PMR735A: All versions

PMR735B: All versions

PMW3100: All versions

PMX24: All versions

PMX50: All versions

PMX55: All versions

QAT3514: All versions

QAT3516: All versions

QAT3518: All versions

QAT3519: All versions

QAT3522: All versions

QAT3550: All versions

QAT3555: All versions

QAT5515: All versions

QAT5516: All versions

QAT5522: All versions

QAT5533: All versions

QAT5568: All versions

QBT1000: All versions

QBT1500: All versions

QBT2000: All versions

QCA4004: All versions

QCA4020: All versions

QCA4024: All versions

QCA6174A: All versions

QCA6175A: All versions

QCA6234: All versions

QCA6310: All versions

QCA6320: All versions

QCA6335: All versions

QCA6390: All versions

QCA6391: All versions

QCA6420: All versions

QCA6421: All versions

QCA6426: All versions

QCA6428: All versions

QCA6430: All versions

QCA6431: All versions

QCA6436: All versions

QCA6438: All versions

QCA6564: All versions

QCA6564A: All versions

QCA6564AU: All versions

QCA6574: All versions

QCA6574A: All versions

QCA6574AU: All versions

QCA6584AU: All versions

QCA6595: All versions

QCA6595AU: All versions

QCA6694: All versions

QCA6694AU: All versions

QCA6696: All versions

QCA8072: All versions

QCA8075: All versions

QCA8081: All versions

QCA8337: All versions

QCA9367: All versions

QCA9377: All versions

QCA9379: All versions

QCA9888: All versions

QCA9889: All versions

QCA9984: All versions

QCC112: All versions

QCM2290: All versions

QCM4290: All versions

QCM6125: All versions

QCN5021: All versions

QCN5022: All versions

QCN5024: All versions

QCN5052: All versions

QCN5054: All versions

QCN5064: All versions

QCN5121: All versions

QCN5122: All versions

QCN5124: All versions

QCN5152: All versions

QCN5154: All versions

QCN5164: All versions

QCN5550: All versions

QCN6023: All versions

QCN6024: All versions

QCN9000: All versions

QCN9012: All versions

QCN9022: All versions

QCN9024: All versions

QCN9070: All versions

QCN9072: All versions

QCN9074: All versions

QCN9100: All versions

QCS2290: All versions

QCS405: All versions

QCS410: All versions

QCS4290: All versions

QCS603: All versions

QCS605: All versions

QCS610: All versions

QCS6125: All versions

QDM2301: All versions

QDM2302: All versions

QDM2305: All versions

QDM2307: All versions

QDM2308: All versions

QDM2310: All versions

QDM3301: All versions

QDM4643: All versions

QDM4650: All versions

QDM5620: All versions

QDM5621: All versions

QDM5650: All versions

QDM5652: All versions

QDM5670: All versions

QDM5671: All versions

QDM5677: All versions

QDM5679: All versions

QET4100: All versions

QET4101: All versions

QET4200AQ: All versions

QET5100: All versions

QET5100M: All versions

QET6100: All versions

QET6105: All versions

QET6110: All versions

QFE2080FC: All versions

QFE2081FC: All versions

QFE2082FC: All versions

QFE2101: All versions

QFE2520: All versions

QFE2550: All versions

QFE3100: All versions

QFE3320: All versions

QFE3340: All versions

QFE3440FC: All versions

QFE4301: All versions

QFE4302: All versions

QFE4303: All versions

QFE4305: All versions

QFE4308: All versions

QFE4309: All versions

QFE4320: All versions

QFE4373FC: All versions

QFE4455FC: All versions

QFE4465FC: All versions

QFS2530: All versions

QFS2580: All versions

QFS2608: All versions

QFS2630: All versions

QLN1020: All versions

QLN1021AQ: All versions

QLN1030: All versions

QLN1031: All versions

QLN1035BD: All versions

QLN1036AQ: All versions

QLN4640: All versions

QLN4642: All versions

QLN4650: All versions

QLN5020: All versions

QLN5030: All versions

QLN5040: All versions

QPA2625: All versions

QPA4340: All versions

QPA4360: All versions

QPA4361: All versions

QPA5373: All versions

QPA5460: All versions

QPA5461: All versions

QPA5580: All versions

QPA5581: All versions

QPA6560: All versions

QPA8673: All versions

QPA8675: All versions

QPA8686: All versions

QPA8688: All versions

QPA8801: All versions

QPA8802: All versions

QPA8803: All versions

QPA8821: All versions

QPA8842: All versions

QPM2630: All versions

QPM4621: All versions

QPM4630: All versions

QPM4640: All versions

QPM4641: All versions

QPM4650: All versions

QPM5541: All versions

QPM5577: All versions

QPM5579: All versions

QPM5620: All versions

QPM5621: All versions

QPM5641: All versions

QPM5657: All versions

QPM5658: All versions

QPM5670: All versions

QPM5677: All versions

QPM5679: All versions

QPM5870: All versions

QPM5875: All versions

QPM6325: All versions

QPM6375: All versions

QPM6582: All versions

QPM6585: All versions

QPM6621: All versions

QPM6670: All versions

QPM8820: All versions

QPM8830: All versions

QPM8870: All versions

QPM8895: All versions

QSM7250: All versions

QSM8250: All versions

QSM8350: All versions

QSW6310: All versions

QSW8573: All versions

QSW8574: All versions

QTC410S: All versions

QTC800H: All versions

QTC800S: All versions

QTC800T: All versions

QTC801S: All versions

QTM525: All versions

QTM527: All versions

Qualcomm215: All versions

RGR7640AU: All versions

RSW8577: All versions

SA2150P: All versions

SA415M: All versions

SA515M: All versions

SA6145P: All versions

SA6150P: All versions

SA6155: All versions

SA6155P: All versions

SA8150P: All versions

SA8155: All versions

SA8155P: All versions

SA8195P: All versions

SC8180X+SDX55: All versions

SD455: All versions

SD636: All versions

SD675: All versions

SD8C: All versions

SD8CX: All versions

SD205: All versions

SD210: All versions

SD429: All versions

SD439: All versions

SD450: All versions

SD460: All versions

SD480: All versions

SD632: All versions

SD660: All versions

SD662: All versions

SD665: All versions

SD670: All versions

SD678: All versions

SD6905G: All versions

SD710: All versions

SD712: All versions

SD720G: All versions

SD730: All versions

SD750G: All versions

SD765: All versions

SD765G: All versions

SD768G: All versions

SD7c: All versions

SD820: All versions

SD821: All versions

SD835: All versions

SD845: All versions

SD850: All versions

SD855: All versions

SD8655G: All versions

SD870: All versions

SD888: All versions

SD8885G: All versions

SDA429W: All versions

SDM429W: All versions

SDM630: All versions

SDR051: All versions

SDR052: All versions

SDR105: All versions

SDR425: All versions

SDR660: All versions

SDR660G: All versions

SDR675: All versions

SDR735: All versions

SDR735G: All versions

SDR8150: All versions

SDR8250: All versions

SDR845: All versions

SDR865: All versions

SDX24: All versions

SDX50M: All versions

SDX55: All versions

SDX55M: All versions

SDXR1: All versions

SDXR25G: All versions

SM4125: All versions

SM6250: All versions

SM6250P: All versions

SM7250P: All versions

SMB1350: All versions

SMB1351: All versions

SMB1354: All versions

SMB1355: All versions

SMB1358: All versions

SMB1360: All versions

SMB1380: All versions

SMB1381: All versions

SMB1390: All versions

SMB1395: All versions

SMB1396: All versions

SMB1398: All versions

SMB231: All versions

SMB2351: All versions

SMB358: All versions

SMR525: All versions

SMR526: All versions

SMR545: All versions

SMR546: All versions

WCD9306: All versions

WCD9326: All versions

WCD9330: All versions

WCD9335: All versions

WCD9340: All versions

WCD9341: All versions

WCD9360: All versions

WCD9370: All versions

WCD9371: All versions

WCD9375: All versions

WCD9380: All versions

WCD9385: All versions

WCN3610: All versions

WCN3615: All versions

WCN3620: All versions

WCN3660: All versions

WCN3660B: All versions

WCN3680: All versions

WCN3680B: All versions

WCN3910: All versions

WCN3950: All versions

WCN3980: All versions

WCN3988: All versions

WCN3990: All versions

WCN3991: All versions

WCN3998: All versions

WCN3999: All versions

WCN6750: All versions

WCN6850: All versions

WCN6851: All versions

WCN6855: All versions

WCN6856: All versions

WGR7640: All versions

WSA8810: All versions

WSA8815: All versions

WSA8830: All versions

WSA8835: All versions

WTR2955: All versions

WTR2965: All versions

WTR3905: All versions

WTR3925: All versions

WTR3950: All versions

WTR4605: All versions

WTR4905: All versions

WTR5975: All versions

WTR6955: All versions

External links

http://www.qualcomm.com/company/product-security/bulletins/may-2021-bulletin


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

8) Out-of-bounds write

EUVDB-ID: #VU52811

Risk: Low

CVSSv3.1: 6.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2020-11288

CWE-ID: CWE-787 - Out-of-bounds write

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a boundary error in Content Protection feature while processing commands. A local user can trigger an out-of-bounds write error in playready and escalate privileges on the system.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

AQT1000: All versions

AR8031: All versions

AR8035: All versions

CSRA6620: All versions

CSRA6640: All versions

CSRB31024: All versions

FSM10055: All versions

FSM10056: All versions

MDM9205: All versions

PM3003A: All versions

PM4125: All versions

PM4250: All versions

PM456: All versions

PM6125: All versions

PM6150: All versions

PM6150A: All versions

PM6150L: All versions

PM6250: All versions

PM6350: All versions

PM640A: All versions

PM640L: All versions

PM640P: All versions

PM660: All versions

PM660L: All versions

PM670: All versions

PM670A: All versions

PM670L: All versions

PM7150A: All versions

PM7150L: All versions

PM7250: All versions

PM7250B: All versions

PM8004: All versions

PM8005: All versions

PM8008: All versions

PM8009: All versions

PM8150: All versions

PM8150A: All versions

PM8150B: All versions

PM8150C: All versions

PM8150L: All versions

PM8250: All versions

PM8350: All versions

PM8350B: All versions

PM8350BH: All versions

PM8350C: All versions

PM855: All versions

PM855B: All versions

PM855L: All versions

PM855P: All versions

PM8998: All versions

PMC1000H: All versions

PMD9655: All versions

PME605: All versions

PMI632: All versions

PMI8998: All versions

PMK8002: All versions

PMK8003: All versions

PMK8350: All versions

PMM6155AU: All versions

PMM8155AU: All versions

PMM8195AU: All versions

PMM855AU: All versions

PMR525: All versions

PMR735A: All versions

PMR735B: All versions

PMX24: All versions

PMX50: All versions

PMX55: All versions

QAT3516: All versions

QAT3518: All versions

QAT3519: All versions

QAT3522: All versions

QAT3550: All versions

QAT3555: All versions

QAT5515: All versions

QAT5516: All versions

QAT5522: All versions

QAT5533: All versions

QAT5568: All versions

QBT1500: All versions

QBT2000: All versions

QCA4004: All versions

QCA6174A: All versions

QCA6175A: All versions

QCA6310: All versions

QCA6335: All versions

QCA6390: All versions

QCA6391: All versions

QCA6420: All versions

QCA6421: All versions

QCA6426: All versions

QCA6430: All versions

QCA6431: All versions

QCA6436: All versions

QCA6564: All versions

QCA6564A: All versions

QCA6564AU: All versions

QCA6574: All versions

QCA6574A: All versions

QCA6574AU: All versions

QCA6584AU: All versions

QCA6595: All versions

QCA6595AU: All versions

QCA6696: All versions

QCA8337: All versions

QCA9377: All versions

QCM2290: All versions

QCM4290: All versions

QCM6125: All versions

QCS2290: All versions

QCS405: All versions

QCS410: All versions

QCS4290: All versions

QCS603: All versions

QCS605: All versions

QCS610: All versions

QCS6125: All versions

QDM2301: All versions

QDM2302: All versions

QDM2305: All versions

QDM2307: All versions

QDM2308: All versions

QDM2310: All versions

QDM3301: All versions

QDM4643: All versions

QDM4650: All versions

QDM5620: All versions

QDM5621: All versions

QDM5650: All versions

QDM5652: All versions

QDM5670: All versions

QDM5671: All versions

QDM5677: All versions

QDM5679: All versions

QET4100: All versions

QET4101: All versions

QET4200AQ: All versions

QET5100: All versions

QET5100M: All versions

QET6100: All versions

QET6105: All versions

QET6110: All versions

QFS2530: All versions

QFS2580: All versions

QFS2608: All versions

QFS2630: All versions

QLN1021AQ: All versions

QLN1031: All versions

QLN1036AQ: All versions

QLN4640: All versions

QLN4642: All versions

QLN4650: All versions

QLN5020: All versions

QLN5030: All versions

QLN5040: All versions

QPA2625: All versions

QPA4360: All versions

QPA4361: All versions

QPA5461: All versions

QPA5580: All versions

QPA5581: All versions

QPA6560: All versions

QPA8673: All versions

QPA8675: All versions

QPA8686: All versions

QPA8688: All versions

QPA8801: All versions

QPA8802: All versions

QPA8803: All versions

QPA8821: All versions

QPA8842: All versions

QPM4621: All versions

QPM4630: All versions

QPM4640: All versions

QPM4641: All versions

QPM4650: All versions

QPM5541: All versions

QPM5577: All versions

QPM5579: All versions

QPM5620: All versions

QPM5621: All versions

QPM5641: All versions

QPM5657: All versions

QPM5658: All versions

QPM5670: All versions

QPM5677: All versions

QPM5679: All versions

QPM5870: All versions

QPM5875: All versions

QPM6325: All versions

QPM6375: All versions

QPM6582: All versions

QPM6585: All versions

QPM6621: All versions

QPM6670: All versions

QPM8820: All versions

QPM8830: All versions

QPM8870: All versions

QPM8895: All versions

QSM7250: All versions

QSM8250: All versions

QSM8350: All versions

QSW6310: All versions

QSW8573: All versions

QSW8574: All versions

QTC410S: All versions

QTC800H: All versions

QTC800S: All versions

QTC801S: All versions

QTM525: All versions

QTM527: All versions

SA2150P: All versions

SA415M: All versions

SA515M: All versions

SA6145P: All versions

SA6150P: All versions

SA6155: All versions

SA6155P: All versions

SA8150P: All versions

SA8155: All versions

SA8155P: All versions

SA8195P: All versions

SC8180X+SDX55: All versions

SD675: All versions

SD8C: All versions

SD8CX: All versions

SD460: All versions

SD480: All versions

SD662: All versions

SD665: All versions

SD670: All versions

SD678: All versions

SD6905G: All versions

SD710: All versions

SD712: All versions

SD720G: All versions

SD730: All versions

SD750G: All versions

SD765: All versions

SD765G: All versions

SD768G: All versions

SD7c: All versions

SD845: All versions

SD850: All versions

SD855: All versions

SD8655G: All versions

SD870: All versions

SD888: All versions

SD8885G: All versions

SDR051: All versions

SDR052: All versions

SDR105: All versions

SDR425: All versions

SDR660: All versions

SDR660G: All versions

SDR675: All versions

SDR735: All versions

SDR735G: All versions

SDR8150: All versions

SDR8250: All versions

SDR865: All versions

SDX24: All versions

SDX50M: All versions

SDX55: All versions

SDX55M: All versions

SDXR1: All versions

SDXR25G: All versions

SM4125: All versions

SM6250: All versions

SM6250P: All versions

SM7250P: All versions

SMB1351: All versions

SMB1354: All versions

SMB1355: All versions

SMB1380: All versions

SMB1381: All versions

SMB1390: All versions

SMB1395: All versions

SMB1396: All versions

SMB1398: All versions

SMB231: All versions

SMB2351: All versions

SMR525: All versions

SMR526: All versions

SMR545: All versions

SMR546: All versions

WCD9306: All versions

WCD9326: All versions

WCD9335: All versions

WCD9340: All versions

WCD9341: All versions

WCD9360: All versions

WCD9370: All versions

WCD9371: All versions

WCD9375: All versions

WCD9380: All versions

WCD9385: All versions

WCN3910: All versions

WCN3950: All versions

WCN3980: All versions

WCN3988: All versions

WCN3990: All versions

WCN3991: All versions

WCN3998: All versions

WCN3999: All versions

WCN6750: All versions

WCN6850: All versions

WCN6851: All versions

WCN6855: All versions

WCN6856: All versions

WGR7640: All versions

WSA8810: All versions

WSA8815: All versions

WSA8830: All versions

WSA8835: All versions

WTR2965: All versions

WTR3925: All versions

WTR5975: All versions

External links

http://www.qualcomm.com/company/product-security/bulletins/may-2021-bulletin


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

9) Out-of-bounds read

EUVDB-ID: #VU52810

Risk: Medium

CVSSv3.1: 5.7 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L/E:U/RL:O/RC:C]

CVE-ID: CVE-2020-11285

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

Description

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to a boundary condition within the Data Modem component when processing RTCP packets. A remote attacker can create a specially crafted RTCP packets to the system, trigger out-of-bounds read error and read contents of memory on the system.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

APQ8009: All versions

APQ8009W: All versions

APQ8017: All versions

APQ8037: All versions

APQ8053: All versions

APQ8084: All versions

APQ8096AU: All versions

AQT1000: All versions

AR8151: All versions

CSR6030: All versions

CSRB31024: All versions

MDM8207: All versions

MDM9150: All versions

MDM9205: All versions

MDM9206: All versions

MDM9207: All versions

MDM9250: All versions

MDM9607: All versions

MDM9625: All versions

MDM9628: All versions

MDM9635M: All versions

MDM9640: All versions

MDM9645: All versions

MDM9650: All versions

MDM9655: All versions

MSM8108: All versions

MSM8208: All versions

MSM8209: All versions

MSM8608: All versions

MSM8909W: All versions

MSM8917: All versions

MSM8920: All versions

MSM8937: All versions

MSM8940: All versions

MSM8953: All versions

MSM8976: All versions

MSM8976SG: All versions

MSM8996AU: All versions

PM215: All versions

PM3003A: All versions

PM439: All versions

PM456: All versions

PM6125: All versions

PM6150: All versions

PM6150A: All versions

PM6150L: All versions

PM6250: All versions

PM6350: All versions

PM640A: All versions

PM640L: All versions

PM640P: All versions

PM660: All versions

PM660A: All versions

PM660L: All versions

PM670: All versions

PM670L: All versions

PM7150A: All versions

PM7150L: All versions

PM7250: All versions

PM7250B: All versions

PM8004: All versions

PM8005: All versions

PM8008: All versions

PM8009: All versions

PM8019: All versions

PM8150: All versions

PM8150A: All versions

PM8150B: All versions

PM8150C: All versions

PM8150L: All versions

PM8250: All versions

PM855: All versions

PM855A: All versions

PM855B: All versions

PM855L: All versions

PM855P: All versions

PM8909: All versions

PM8916: All versions

PM8937: All versions

PM8940: All versions

PM8952: All versions

PM8953: All versions

PM8956: All versions

PM8996: All versions

PM8998: All versions

PMC1000H: All versions

PMD9607: All versions

PMD9635: All versions

PMD9645: All versions

PMD9655: All versions

PMD9655AU: All versions

PME605: All versions

PMI632: All versions

PMI8937: All versions

PMI8940: All versions

PMI8952: All versions

PMI8994: All versions

PMI8996: All versions

PMI8998: All versions

PMK8001: All versions

PMK8002: All versions

PMK8003: All versions

PMM855AU: All versions

PMM8996AU: All versions

PMR525: All versions

PMR735A: All versions

PMR735B: All versions

PMW3100: All versions

PMX20: All versions

PMX24: All versions

PMX50: All versions

PMX55: All versions

QAT3514: All versions

QAT3516: All versions

QAT3518: All versions

QAT3519: All versions

QAT3522: All versions

QAT3550: All versions

QAT3555: All versions

QAT5515: All versions

QAT5516: All versions

QAT5522: All versions

QAT5533: All versions

QBT1000: All versions

QBT1500: All versions

QBT2000: All versions

QCA4004: All versions

QCA4020: All versions

QCA6174A: All versions

QCA6310: All versions

QCA6320: All versions

QCA6335: All versions

QCA6390: All versions

QCA6391: All versions

QCA6420: All versions

QCA6421: All versions

QCA6426: All versions

QCA6430: All versions

QCA6431: All versions

QCA6436: All versions

QCA6564A: All versions

QCA6564AU: All versions

QCA6574: All versions

QCA6574A: All versions

QCA6574AU: All versions

QCA6584: All versions

QCA6584AU: All versions

QCA6595: All versions

QCA6595AU: All versions

QCA6694: All versions

QCA6694AU: All versions

QCA6696: All versions

QCA8337: All versions

QCA9367: All versions

QCA9377: All versions

QCA9379: All versions

QCC1110: All versions

QCM4290: All versions

QCM6125: All versions

QCS410: All versions

QCS4290: All versions

QCS603: All versions

QCS605: All versions

QCS610: All versions

QCS6125: All versions

QDM2301: All versions

QDM2302: All versions

QDM2305: All versions

QDM2307: All versions

QDM2308: All versions

QDM2310: All versions

QDM3301: All versions

QDM5620: All versions

QDM5621: All versions

QDM5650: All versions

QDM5652: All versions

QDM5670: All versions

QDM5671: All versions

QDM5677: All versions

QDM5679: All versions

QET4100: All versions

QET4101: All versions

QET4200AQ: All versions

QET5100: All versions

QET5100M: All versions

QET6100: All versions

QET6110: All versions

QFE1035: All versions

QFE1040: All versions

QFE1045: All versions

QFE1100: All versions

QFE2080FC: All versions

QFE2081FC: All versions

QFE2082FC: All versions

QFE2101: All versions

QFE2340: All versions

QFE2520: All versions

QFE2550: All versions

QFE3100: All versions

QFE3320: All versions

QFE3335: All versions

QFE3340: All versions

QFE3345: All versions

QFE3440FC: All versions

QFE4301: All versions

QFE4302: All versions

QFE4303: All versions

QFE4305: All versions

QFE4308: All versions

QFE4309: All versions

QFE4320: All versions

QFE4373FC: All versions

QFE4455FC: All versions

QFE4465FC: All versions

QFS2530: All versions

QFS2580: All versions

QLN1020: All versions

QLN1021AQ: All versions

QLN1030: All versions

QLN1031: All versions

QLN1035BD: All versions

QLN1036AQ: All versions

QLN4640: All versions

QLN4642: All versions

QLN4650: All versions

QLN5020: All versions

QLN5030: All versions

QLN5040: All versions

QPA2625: All versions

QPA4340: All versions

QPA4360: All versions

QPA4361: All versions

QPA5373: All versions

QPA5460: All versions

QPA5580: All versions

QPA5581: All versions

QPA6560: All versions

QPA8673: All versions

QPA8675: All versions

QPA8686: All versions

QPA8801: All versions

QPA8802: All versions

QPA8803: All versions

QPA8821: All versions

QPA8842: All versions

QPM2630: All versions

QPM4650: All versions

QPM5620: All versions

QPM5621: All versions

QPM5657: All versions

QPM5658: All versions

QPM5670: All versions

QPM5677: All versions

QPM5679: All versions

QPM6582: All versions

QPM6585: All versions

QPM8820: All versions

QPM8830: All versions

QPM8870: All versions

QPM8895: All versions

QSM7250: All versions

QSW6310: All versions

QSW8573: All versions

QSW8574: All versions

QTC410S: All versions

QTC800H: All versions

QTC800S: All versions

QTC800T: All versions

QTC801S: All versions

QTM525: All versions

QTM527: All versions

Qualcomm215: All versions

RGR7640AU: All versions

RSW8577: All versions

SA415M: All versions

SA515M: All versions

SA8155: All versions

SA8155P: All versions

SC8180X+SDX55: All versions

SD455: All versions

SD636: All versions

SD675: All versions

SD8C: All versions

SD8CX: All versions

SD205: All versions

SD210: All versions

SD429: All versions

SD439: All versions

SD450: All versions

SD480: All versions

SD632: All versions

SD660: All versions

SD665: All versions

SD670: All versions

SD678: All versions

SD6905G: All versions

SD710: All versions

SD712: All versions

SD720G: All versions

SD730: All versions

SD750G: All versions

SD765: All versions

SD765G: All versions

SD768G: All versions

SD820: All versions

SD821: All versions

SD835: All versions

SD845: All versions

SD850: All versions

SD855: All versions

SD8655G: All versions

SD870: All versions

SDM630: All versions

SDR051: All versions

SDR052: All versions

SDR105: All versions

SDR660: All versions

SDR660G: All versions

SDR675: All versions

SDR735: All versions

SDR735G: All versions

SDR8150: All versions

SDR8250: All versions

SDR845: All versions

SDR865: All versions

SDW2500: All versions

SDW3100: All versions

SDX20: All versions

SDX24: All versions

SDX50M: All versions

SDX55: All versions

SDX55M: All versions

SDXR1: All versions

SDXR25G: All versions

SM6250: All versions

SM6250P: All versions

SM7250P: All versions

SMB1351: All versions

SMB1355: All versions

SMB1357: All versions

SMB1358: All versions

SMB1360: All versions

SMB1380: All versions

SMB1381: All versions

SMB1390: All versions

SMB1395: All versions

SMB1396: All versions

SMB231: All versions

SMB2351: All versions

SMB358: All versions

SMB358S: All versions

SMR525: All versions

SMR526: All versions

WCD9306: All versions

WCD9326: All versions

WCD9330: All versions

WCD9335: All versions

WCD9340: All versions

WCD9341: All versions

WCD9360: All versions

WCD9370: All versions

WCD9371: All versions

WCD9375: All versions

WCD9380: All versions

WCD9385: All versions

WCN3610: All versions

WCN3615: All versions

WCN3620: All versions

WCN3660: All versions

WCN3660B: All versions

WCN3680: All versions

WCN3680B: All versions

WCN3910: All versions

WCN3950: All versions

WCN3980: All versions

WCN3988: All versions

WCN3990: All versions

WCN3991: All versions

WCN3998: All versions

WCN6850: All versions

WCN6851: All versions

WCN6855: All versions

WCN6856: All versions

WFR1620: All versions

WGR7640: All versions

WHS9410: All versions

WSA8810: All versions

WSA8815: All versions

WSA8830: All versions

WSA8835: All versions

WTR1625: All versions

WTR2955: All versions

WTR2965: All versions

WTR3905: All versions

WTR3925: All versions

WTR3950: All versions

WTR4605: All versions

WTR4905: All versions

WTR5975: All versions

WTR6955: All versions

External links

http://www.qualcomm.com/company/product-security/bulletins/may-2021-bulletin


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

10) Integer overflow

EUVDB-ID: #VU52808

Risk: Medium

CVSSv3.1: 6.5 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C]

CVE-ID: CVE-2020-11279

CWE-ID: CWE-190 - Integer overflow

Exploit availability: No

Description

The vulnerability allows a remote attacker to gain access to sensitive information.

The vulnerability exists due to integer overflow within the Modem component when processing crafted SDES packets. A remote attacker can pass specially crafted SDES packets to the system, trigger integer overflow and gain access to sensitive information.


Mitigation

Install updates from vendor's website.

Vulnerable software versions

APQ8009: All versions

APQ8009W: All versions

APQ8017: All versions

APQ8037: All versions

APQ8053: All versions

APQ8084: All versions

APQ8096AU: All versions

AQT1000: All versions

AR6003: All versions

AR8151: All versions

CSR6030: All versions

CSRB31024: All versions

MDM8207: All versions

MDM8215: All versions

MDM8215M: All versions

MDM8615M: All versions

MDM9150: All versions

MDM9205: All versions

MDM9206: All versions

MDM9207: All versions

MDM9215: All versions

MDM9230: All versions

MDM9250: All versions

MDM9310: All versions

MDM9330: All versions

MDM9607: All versions

MDM9615: All versions

MDM9615M: All versions

MDM9625: All versions

MDM9628: All versions

MDM9630: All versions

MDM9635M: All versions

MDM9640: All versions

MDM9645: All versions

MDM9650: All versions

MDM9655: All versions

MSM8108: All versions

MSM8208: All versions

MSM8209: All versions

MSM8608: All versions

MSM8909W: All versions

MSM8917: All versions

MSM8920: All versions

MSM8937: All versions

MSM8940: All versions

MSM8953: All versions

MSM8976: All versions

MSM8976SG: All versions

MSM8996AU: All versions

PM215: All versions

PM3003A: All versions

PM439: All versions

PM456: All versions

PM6125: All versions

PM6150: All versions

PM6150A: All versions

PM6150L: All versions

PM6250: All versions

PM640A: All versions

PM640L: All versions

PM640P: All versions

PM660: All versions

PM660A: All versions

PM660L: All versions

PM670: All versions

PM670L: All versions

PM7150A: All versions

PM7150L: All versions

PM7250: All versions

PM7250B: All versions

PM8004: All versions

PM8005: All versions

PM8008: All versions

PM8009: All versions

PM8018: All versions

PM8019: All versions

PM8150: All versions

PM8150A: All versions

PM8150B: All versions

PM8150C: All versions

PM8150L: All versions

PM8250: All versions

PM8350: All versions

PM855: All versions

PM855A: All versions

PM855B: All versions

PM855L: All versions

PM855P: All versions

PM8909: All versions

PM8916: All versions

PM8937: All versions

PM8940: All versions

PM8952: All versions

PM8953: All versions

PM8956: All versions

PM8996: All versions

PM8998: All versions

PMC1000H: All versions

PMD9607: All versions

PMD9635: All versions

PMD9645: All versions

PMD9655: All versions

PMD9655AU: All versions

PME605: All versions

PMI632: All versions

PMI8937: All versions

PMI8940: All versions

PMI8952: All versions

PMI8994: All versions

PMI8996: All versions

PMI8998: All versions

PMK8001: All versions

PMK8002: All versions

PMM855AU: All versions

PMM8996AU: All versions

PMR525: All versions

PMR735A: All versions

PMW3100: All versions

PMX20: All versions

PMX24: All versions

PMX50: All versions

PMX55: All versions

QAT3514: All versions

QAT3516: All versions

QAT3518: All versions

QAT3519: All versions

QAT3522: All versions

QAT3550: All versions

QAT3555: All versions

QAT5515: All versions

QAT5516: All versions

QAT5522: All versions

QAT5533: All versions

QBT1000: All versions

QBT1500: All versions

QBT2000: All versions

QCA4004: All versions

QCA4020: All versions

QCA6174: All versions

QCA6174A: All versions

QCA6234: All versions

QCA6310: All versions

QCA6320: All versions

QCA6335: All versions

QCA6390: All versions

QCA6391: All versions

QCA6420: All versions

QCA6421: All versions

QCA6426: All versions

QCA6430: All versions

QCA6431: All versions

QCA6436: All versions

QCA6564A: All versions

QCA6564AU: All versions

QCA6574: All versions

QCA6574A: All versions

QCA6574AU: All versions

QCA6584: All versions

QCA6584AU: All versions

QCA6595: All versions

QCA6595AU: All versions

QCA6694: All versions

QCA6694AU: All versions

QCA6696: All versions

QCA8337: All versions

QCA9367: All versions

QCA9377: All versions

QCA9379: All versions

QCC1110: All versions

QCM4290: All versions

QCM6125: All versions

QCS410: All versions

QCS4290: All versions

QCS603: All versions

QCS605: All versions

QCS610: All versions

QCS6125: All versions

QDM2301: All versions

QDM2302: All versions

QDM2305: All versions

QDM2307: All versions

QDM2308: All versions

QDM2310: All versions

QDM3301: All versions

QDM5620: All versions

QDM5621: All versions

QDM5650: All versions

QDM5652: All versions

QDM5670: All versions

QDM5671: All versions

QDM5677: All versions

QDM5679: All versions

QET4100: All versions

QET4101: All versions

QET4200AQ: All versions

QET5100: All versions

QET5100M: All versions

QET6110: All versions

QFE1035: All versions

QFE1040: All versions

QFE1045: All versions

QFE1100: All versions

QFE2080FC: All versions

QFE2081FC: All versions

QFE2082FC: All versions

QFE2101: All versions

QFE2340: All versions

QFE2520: All versions

QFE2550: All versions

QFE3100: All versions

QFE3320: All versions

QFE3335: All versions

QFE3340: All versions

QFE3345: All versions

QFE3440FC: All versions

QFE4301: All versions

QFE4302: All versions

QFE4303: All versions

QFE4305: All versions

QFE4308: All versions

QFE4309: All versions

QFE4320: All versions

QFE4373FC: All versions

QFE4455FC: All versions

QFE4465FC: All versions

QFS2530: All versions

QFS2580: All versions

QLN1020: All versions

QLN1021AQ: All versions

QLN1030: All versions

QLN1031: All versions

QLN1035BD: All versions

QLN1036AQ: All versions

QLN4640: All versions

QLN4642: All versions

QLN4650: All versions

QLN5020: All versions

QLN5030: All versions

QLN5040: All versions

QPA2625: All versions

QPA4340: All versions

QPA4360: All versions

QPA4361: All versions

QPA5373: All versions

QPA5460: All versions

QPA5580: All versions

QPA6560: All versions

QPA8673: All versions

QPA8675: All versions

QPA8686: All versions

QPA8801: All versions

QPA8802: All versions

QPA8803: All versions

QPA8821: All versions

QPA8842: All versions

QPM2630: All versions

QPM4650: All versions

QPM5620: All versions

QPM5621: All versions

QPM5657: All versions

QPM5658: All versions

QPM5670: All versions

QPM5677: All versions

QPM5679: All versions

QPM6582: All versions

QPM6585: All versions

QPM8820: All versions

QPM8830: All versions

QPM8870: All versions

QPM8895: All versions

QSM7250: All versions

QSW6310: All versions

QSW8573: All versions

QSW8574: All versions

QTC410S: All versions

QTC800H: All versions

QTC800S: All versions

QTC800T: All versions

QTC801S: All versions

QTM525: All versions

QTM527: All versions

Qualcomm215: All versions

RGR7640AU: All versions

RSW8577: All versions

SA415M: All versions

SA515M: All versions

SA8155: All versions

SA8155P: All versions

SC8180X+SDX55: All versions

SD455: All versions

SD636: All versions

SD675: All versions

SD8C: All versions

SD8CX: All versions

SD205: All versions

SD210: All versions

SD429: All versions

SD439: All versions

SD450: All versions

SD632: All versions

SD660: All versions

SD665: All versions

SD670: All versions

SD678: All versions

SD710: All versions

SD712: All versions

SD720G: All versions

SD730: All versions

SD765: All versions

SD765G: All versions

SD768G: All versions

SD820: All versions

SD821: All versions

SD835: All versions

SD845: All versions

SD850: All versions

SD855: All versions

SD8655G: All versions

SD870: All versions

SD8885G: All versions

SDM630: All versions

SDR051: All versions

SDR052: All versions

SDR105: All versions

SDR660: All versions

SDR660G: All versions

SDR675: All versions

SDR735: All versions

SDR8150: All versions

SDR8250: All versions

SDR845: All versions

SDR865: All versions

SDW2500: All versions

SDW3100: All versions

SDX20: All versions

SDX24: All versions

SDX50M: All versions

SDX55: All versions

SDX55M: All versions

SDXR1: All versions

SDXR25G: All versions

SM6250: All versions

SM6250P: All versions

SM7250P: All versions

SMB1350: All versions

SMB1351: All versions

SMB1355: All versions

SMB1357: All versions

SMB1358: All versions

SMB1360: All versions

SMB1380: All versions

SMB1381: All versions

SMB1390: All versions

SMB231: All versions

SMB2351: All versions

SMB358: All versions

SMB358S: All versions

SMR525: All versions

SMR526: All versions

SMR545: All versions

SMR546: All versions

WCD9306: All versions

WCD9326: All versions

WCD9330: All versions

WCD9335: All versions

WCD9340: All versions

WCD9341: All versions

WCD9360: All versions

WCD9370: All versions

WCD9371: All versions

WCD9375: All versions

WCD9380: All versions

WCD9385: All versions

WCN3610: All versions

WCN3615: All versions

WCN3620: All versions

WCN3660: All versions

WCN3660B: All versions

WCN3680: All versions

WCN3680B: All versions

WCN3910: All versions

WCN3950: All versions

WCN3980: All versions

WCN3988: All versions

WCN3990: All versions

WCN3991: All versions

WCN3998: All versions

WCN6850: All versions

WCN6851: All versions

WCN6855: All versions

WCN6856: All versions

WFR1620: All versions

WGR7640: All versions

WHS9410: All versions

WSA8810: All versions

WSA8815: All versions

WTR1605: All versions

WTR1605L: All versions

WTR1625: All versions

WTR2955: All versions

WTR2965: All versions

WTR3905: All versions

WTR3925: All versions

WTR3950: All versions

WTR4605: All versions

WTR4905: All versions

WTR5975: All versions

WTR6955: All versions

External links

http://www.qualcomm.com/company/product-security/bulletins/may-2021-bulletin


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

11) Buffer overflow

EUVDB-ID: #VU52819

Risk: Low

CVSSv3.1: 6.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-1915

CWE-ID: CWE-120 - Buffer overflow

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a boundary error in WLAN component when processing NDP. A local user can trigger buffer overflow and escalate privileges on the system.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

APQ8096AU: All versions

AQT1000: All versions

AR8031: All versions

AR8035: All versions

AR9380: All versions

CSR8811: All versions

CSRA6620: All versions

CSRA6640: All versions

CSRB31024: All versions

FSM10055: All versions

FSM10056: All versions

IPQ4018: All versions

IPQ4019: All versions

IPQ4028: All versions

IPQ4029: All versions

IPQ5010: All versions

IPQ5018: All versions

IPQ6000: All versions

IPQ6005: All versions

IPQ6010: All versions

IPQ6018: All versions

IPQ6028: All versions

IPQ8064: All versions

IPQ8065: All versions

IPQ8068: All versions

IPQ8070: All versions

IPQ8070A: All versions

IPQ8071: All versions

IPQ8071A: All versions

IPQ8072: All versions

IPQ8072A: All versions

IPQ8074: All versions

IPQ8074A: All versions

IPQ8076: All versions

IPQ8076A: All versions

IPQ8078: All versions

IPQ8078A: All versions

IPQ8173: All versions

IPQ8174: All versions

PM3003A: All versions

PM4125: All versions

PM4250: All versions

PM456: All versions

PM6125: All versions

PM6150: All versions

PM6150A: All versions

PM6150L: All versions

PM6250: All versions

PM6350: All versions

PM640A: All versions

PM640L: All versions

PM640P: All versions

PM660: All versions

PM660A: All versions

PM660L: All versions

PM7150A: All versions

PM7150L: All versions

PM7250: All versions

PM7250B: All versions

PM7350C: All versions

PM8004: All versions

PM8005: All versions

PM8008: All versions

PM8009: All versions

PM8150: All versions

PM8150A: All versions

PM8150B: All versions

PM8150C: All versions

PM8150L: All versions

PM8250: All versions

PM8350: All versions

PM8350B: All versions

PM8350BH: All versions

PM8350BHS: All versions

PM8350C: All versions

PM855: All versions

PM855B: All versions

PM855L: All versions

PM855P: All versions

PM8998: All versions

PMC1000H: All versions

PMD9655: All versions

PMI632: All versions

PMI8998: All versions

PMK7350: All versions

PMK8002: All versions

PMK8003: All versions

PMK8350: All versions

PMM6155AU: All versions

PMM8155AU: All versions

PMM8195AU: All versions

PMM855AU: All versions

PMM8996AU: All versions

PMP8074: All versions

PMR525: All versions

PMR735A: All versions

PMR735B: All versions

PMX24: All versions

PMX50: All versions

PMX55: All versions

QAT3514: All versions

QAT3516: All versions

QAT3518: All versions

QAT3519: All versions

QAT3522: All versions

QAT3550: All versions

QAT3555: All versions

QAT5515: All versions

QAT5516: All versions

QAT5522: All versions

QAT5533: All versions

QAT5568: All versions

QBT1500: All versions

QBT2000: All versions

QCA4024: All versions

QCA6175A: All versions

QCA6310: All versions

QCA6320: All versions

QCA6335: All versions

QCA6390: All versions

QCA6391: All versions

QCA6420: All versions

QCA6421: All versions

QCA6426: All versions

QCA6428: All versions

QCA6430: All versions

QCA6431: All versions

QCA6436: All versions

QCA6438: All versions

QCA6564: All versions

QCA6564A: All versions

QCA6564AU: All versions

QCA6574: All versions

QCA6574A: All versions

QCA6574AU: All versions

QCA6584AU: All versions

QCA6595: All versions

QCA6595AU: All versions

QCA6694: All versions

QCA6696: All versions

QCA7500: All versions

QCA8072: All versions

QCA8075: All versions

QCA8081: All versions

QCA8337: All versions

QCA9531: All versions

QCA9558: All versions

QCA9561: All versions

QCA9563: All versions

QCA9880: All versions

QCA9882: All versions

QCA9886: All versions

QCA9887: All versions

QCA9888: All versions

QCA9889: All versions

QCA9896: All versions

QCA9898: All versions

QCA9980: All versions

QCA9982: All versions

QCA9984: All versions

QCA9985: All versions

QCA9990: All versions

QCA9992: All versions

QCA9994: All versions

QCM2290: All versions

QCM4290: All versions

QCM6125: All versions

QCN5021: All versions

QCN5022: All versions

QCN5024: All versions

QCN5052: All versions

QCN5054: All versions

QCN5064: All versions

QCN5121: All versions

QCN5122: All versions

QCN5124: All versions

QCN5152: All versions

QCN5154: All versions

QCN5164: All versions

QCN5500: All versions

QCN5502: All versions

QCN5550: All versions

QCN6023: All versions

QCN6024: All versions

QCN7605: All versions

QCN7606: All versions

QCN9000: All versions

QCN9012: All versions

QCN9022: All versions

QCN9024: All versions

QCN9070: All versions

QCN9072: All versions

QCN9074: All versions

QCN9100: All versions

QCS2290: All versions

QCS405: All versions

QCS410: All versions

QCS4290: All versions

QCS610: All versions

QCS6125: All versions

QDM2301: All versions

QDM2302: All versions

QDM2305: All versions

QDM2307: All versions

QDM2308: All versions

QDM2310: All versions

QDM3301: All versions

QDM3302: All versions

QDM4643: All versions

QDM4650: All versions

QDM5579: All versions

QDM5620: All versions

QDM5621: All versions

QDM5650: All versions

QDM5652: All versions

QDM5670: All versions

QDM5671: All versions

QDM5677: All versions

QDM5679: All versions

QET4100: All versions

QET4101: All versions

QET5100: All versions

QET5100M: All versions

QET6100: All versions

QET6105: All versions

QET6110: All versions

QFS2530: All versions

QFS2580: All versions

QFS2608: All versions

QFS2630: All versions

QLN1020: All versions

QLN1021AQ: All versions

QLN1030: All versions

QLN1031: All versions

QLN1036AQ: All versions

QLN4640: All versions

QLN4642: All versions

QLN4650: All versions

QLN5020: All versions

QLN5030: All versions

QLN5040: All versions

QPA2625: All versions

QPA4340: All versions

QPA4360: All versions

QPA4361: All versions

QPA5461: All versions

QPA5580: All versions

QPA5581: All versions

QPA6560: All versions

QPA8673: All versions

QPA8675: All versions

QPA8686: All versions

QPA8801: All versions

QPA8802: All versions

QPA8803: All versions

QPA8821: All versions

QPA8842: All versions

QPM2630: All versions

QPM4621: All versions

QPM4630: All versions

QPM4640: All versions

QPM4641: All versions

QPM4650: All versions

QPM5541: All versions

QPM5577: All versions

QPM5579: All versions

QPM5620: All versions

QPM5621: All versions

QPM5641: All versions

QPM5657: All versions

QPM5658: All versions

QPM5670: All versions

QPM5677: All versions

QPM5679: All versions

QPM5870: All versions

QPM5875: All versions

QPM6325: All versions

QPM6375: All versions

QPM6582: All versions

QPM6585: All versions

QPM6621: All versions

QPM6670: All versions

QPM8820: All versions

QPM8830: All versions

QPM8870: All versions

QPM8895: All versions

QSM7250: All versions

QSW6310: All versions

QSW8573: All versions

QSW8574: All versions

QTC410S: All versions

QTC800H: All versions

QTC800S: All versions

QTC801S: All versions

QTM525: All versions

QTM527: All versions

RSW8577: All versions

SA2150P: All versions

SA415M: All versions

SA515M: All versions

SA6145P: All versions

SA6150P: All versions

SA6155: All versions

SA6155P: All versions

SA8150P: All versions

SA8155: All versions

SA8155P: All versions

SA8195P: All versions

SD636: All versions

SD675: All versions

SD8C: All versions

SD8CX: All versions

SD460: All versions

SD480: All versions

SD660: All versions

SD662: All versions

SD665: All versions

SD670: All versions

SD678: All versions

SD6905G: All versions

SD710: All versions

SD720G: All versions

SD730: All versions

SD750G: All versions

SD765: All versions

SD765G: All versions

SD768G: All versions

SD835: All versions

SD845: All versions

SD855: All versions

SD8655G: All versions

SD870: All versions

SD888: All versions

SD8885G: All versions

SDM630: All versions

SDR051: All versions

SDR052: All versions

SDR425: All versions

SDR660: All versions

SDR660G: All versions

SDR675: All versions

SDR735: All versions

SDR735G: All versions

SDR8150: All versions

SDR8250: All versions

SDR865: All versions

SDX50M: All versions

SDX55: All versions

SDX55M: All versions

SDXR1: All versions

SDXR25G: All versions

SM4125: All versions

SM6250: All versions

SM6250P: All versions

SM7250P: All versions

SM7350: All versions

SMB1351: All versions

SMB1354: All versions

SMB1355: All versions

SMB1380: All versions

SMB1381: All versions

SMB1390: All versions

SMB1394: All versions

SMB1395: All versions

SMB1396: All versions

SMB1398: All versions

SMB2351: All versions

SMR525: All versions

SMR526: All versions

SMR545: All versions

SMR546: All versions

WCD9326: All versions

WCD9335: All versions

WCD9340: All versions

WCD9341: All versions

WCD9360: All versions

WCD9370: All versions

WCD9371: All versions

WCD9375: All versions

WCD9380: All versions

WCD9385: All versions

WCN3910: All versions

WCN3950: All versions

WCN3980: All versions

WCN3988: All versions

WCN3990: All versions

WCN3991: All versions

WCN3998: All versions

WCN3999: All versions

WCN6740: All versions

WCN6750: All versions

WCN6850: All versions

WCN6851: All versions

WCN6855: All versions

WCN6856: All versions

WGR7640: All versions

WSA8810: All versions

WSA8815: All versions

WSA8830: All versions

WSA8835: All versions

WTR2965: All versions

WTR3925: All versions

WTR5975: All versions

WTR6955: All versions

External links

http://www.qualcomm.com/company/product-security/bulletins/may-2021-bulletin
http://source.codeaurora.org/quic/qsdk/platform/vendor/qcom-opensource/wlan/qca-wifi-host-cmn/commit/?id=9e9faefbf372e00bbdb9752e3c48a96f1e0e4b81


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

12) Reachable Assertion

EUVDB-ID: #VU52807

Risk: Medium

CVSSv3.1: 6.5 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2020-11274

CWE-ID: CWE-617 - Reachable Assertion

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a reachable assertion within the Modem component due to invalid configuration. A remote attacker can perform a denial of service (DoS) attack.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

AQT1000: All versions

CSRB31024: All versions

FSM10055: All versions

FSM10056: All versions

PM3003A: All versions

PM456: All versions

PM6125: All versions

PM6150: All versions

PM6150A: All versions

PM6150L: All versions

PM6250: All versions

PM6350: All versions

PM640A: All versions

PM640L: All versions

PM640P: All versions

PM7150A: All versions

PM7150L: All versions

PM7250: All versions

PM7250B: All versions

PM8004: All versions

PM8005: All versions

PM8008: All versions

PM8009: All versions

PM8150: All versions

PM8150A: All versions

PM8150B: All versions

PM8150C: All versions

PM8150L: All versions

PM8250: All versions

PM8350: All versions

PM8350B: All versions

PM8350BH: All versions

PM8350C: All versions

PM855: All versions

PM855A: All versions

PM855B: All versions

PM855L: All versions

PM855P: All versions

PM8998: All versions

PMC1000H: All versions

PMI632: All versions

PMI8998: All versions

PMK8002: All versions

PMK8003: All versions

PMK8350: All versions

PMM855AU: All versions

PMR525: All versions

PMR735A: All versions

PMR735B: All versions

PMX24: All versions

PMX50: All versions

PMX55: All versions

PMX60: All versions

QAT3516: All versions

QAT3518: All versions

QAT3519: All versions

QAT3522: All versions

QAT3550: All versions

QAT3555: All versions

QAT5515: All versions

QAT5516: All versions

QAT5522: All versions

QAT5533: All versions

QAT5568: All versions

QBT1500: All versions

QBT2000: All versions

QCA6174A: All versions

QCA6390: All versions

QCA6391: All versions

QCA6420: All versions

QCA6421: All versions

QCA6426: All versions

QCA6430: All versions

QCA6431: All versions

QCA6436: All versions

QCA6564AU: All versions

QCA6574A: All versions

QCA6574AU: All versions

QCA6584AU: All versions

QCA6595AU: All versions

QCA6696: All versions

QCA8337: All versions

QCA9377: All versions

QCM6125: All versions

QCS410: All versions

QCS610: All versions

QCS6125: All versions

QDM2301: All versions

QDM2302: All versions

QDM2305: All versions

QDM2307: All versions

QDM2308: All versions

QDM2310: All versions

QDM3301: All versions

QDM4643: All versions

QDM4650: All versions

QDM5620: All versions

QDM5621: All versions

QDM5650: All versions

QDM5652: All versions

QDM5670: All versions

QDM5671: All versions

QDM5677: All versions

QDM5679: All versions

QET4100: All versions

QET4101: All versions

QET5100: All versions

QET5100M: All versions

QET6100: All versions

QET6110: All versions

QFS2530: All versions

QFS2580: All versions

QFS2608: All versions

QFS2630: All versions

QLN1021AQ: All versions

QLN1031: All versions

QLN1036AQ: All versions

QLN4640: All versions

QLN4642: All versions

QLN4650: All versions

QLN5020: All versions

QLN5030: All versions

QLN5040: All versions

QPA2625: All versions

QPA4360: All versions

QPA4361: All versions

QPA5461: All versions

QPA5580: All versions

QPA5581: All versions

QPA6560: All versions

QPA8673: All versions

QPA8675: All versions

QPA8686: All versions

QPA8801: All versions

QPA8802: All versions

QPA8803: All versions

QPA8821: All versions

QPA8842: All versions

QPM4621: All versions

QPM4630: All versions

QPM4640: All versions

QPM4641: All versions

QPM4650: All versions

QPM5620: All versions

QPM5621: All versions

QPM5641: All versions

QPM5657: All versions

QPM5658: All versions

QPM5670: All versions

QPM5677: All versions

QPM5679: All versions

QPM5870: All versions

QPM5875: All versions

QPM6582: All versions

QPM6585: All versions

QPM6621: All versions

QPM6670: All versions

QPM8820: All versions

QPM8830: All versions

QPM8870: All versions

QPM8895: All versions

QSM7250: All versions

QSW6310: All versions

QSW8573: All versions

QSW8574: All versions

QTC410S: All versions

QTC800H: All versions

QTC801S: All versions

QTM525: All versions

QTM527: All versions

SA415M: All versions

SA515M: All versions

SA8155: All versions

SA8155P: All versions

SC8180X+SDX55: All versions

SD675: All versions

SD8C: All versions

SD8CX: All versions

SD480: All versions

SD665: All versions

SD678: All versions

SD6905G: All versions

SD720G: All versions

SD730: All versions

SD750G: All versions

SD765: All versions

SD765G: All versions

SD768G: All versions

SD845: All versions

SD855: All versions

SD8655G: All versions

SD870: All versions

SD8885G: All versions

SDR051: All versions

SDR052: All versions

SDR660: All versions

SDR675: All versions

SDR735: All versions

SDR735G: All versions

SDR8150: All versions

SDR8250: All versions

SDR845: All versions

SDR865: All versions

SDX24: All versions

SDX50M: All versions

SDX55: All versions

SDX55M: All versions

SDXR25G: All versions

SM6250: All versions

SM6250P: All versions

SM7250P: All versions

SMB1351: All versions

SMB1355: All versions

SMB1380: All versions

SMB1381: All versions

SMB1390: All versions

SMB1395: All versions

SMB1396: All versions

SMB1398: All versions

SMB2351: All versions

SMR525: All versions

SMR526: All versions

WCD9340: All versions

WCD9341: All versions

WCD9360: All versions

WCD9370: All versions

WCD9371: All versions

WCD9375: All versions

WCD9380: All versions

WCD9385: All versions

WCN3910: All versions

WCN3950: All versions

WCN3980: All versions

WCN3988: All versions

WCN3990: All versions

WCN3991: All versions

WCN3998: All versions

WCN6850: All versions

WCN6851: All versions

WCN6855: All versions

WCN6856: All versions

WHS9410: All versions

WSA8810: All versions

WSA8815: All versions

WSA8830: All versions

WSA8835: All versions

External links

http://www.qualcomm.com/company/product-security/bulletins/may-2021-bulletin


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

13) Reachable Assertion

EUVDB-ID: #VU52806

Risk: Medium

CVSSv3.1: 6.5 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2020-11273

CWE-ID: CWE-617 - Reachable Assertion

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a reachable assertion within the Modem component. Histogram type KPI was teardown with the assumption of the existence of histogram binning info and will lead to null pointer access when histogram binning info is missing due to lack of null check.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

CSRB31024: All versions

PM3003A: All versions

PM6150A: All versions

PM6150L: All versions

PM6350: All versions

PM7150A: All versions

PM7150L: All versions

PM7250: All versions

PM7250B: All versions

PM8005: All versions

PM8008: All versions

PM8009: All versions

PM8150A: All versions

PM8150B: All versions

PM8150C: All versions

PM8150L: All versions

PM8250: All versions

PM8350: All versions

PM8350B: All versions

PM8350BH: All versions

PM8350C: All versions

PM855: All versions

PM855B: All versions

PM855L: All versions

PM8998: All versions

PMI8998: All versions

PMK8002: All versions

PMK8003: All versions

PMK8350: All versions

PMR525: All versions

PMR735A: All versions

PMR735B: All versions

PMX24: All versions

PMX55: All versions

PMX60: All versions

QAT3516: All versions

QAT3518: All versions

QAT3519: All versions

QAT3555: All versions

QAT5515: All versions

QAT5516: All versions

QAT5522: All versions

QAT5533: All versions

QAT5568: All versions

QBT2000: All versions

QCA6390: All versions

QCA6391: All versions

QCA6421: All versions

QCA6426: All versions

QCA6431: All versions

QCA6436: All versions

QCA6564AU: All versions

QCA6574A: All versions

QCA6574AU: All versions

QCA6584AU: All versions

QCA6595AU: All versions

QCA6696: All versions

QDM2301: All versions

QDM2305: All versions

QDM2307: All versions

QDM2308: All versions

QDM2310: All versions

QDM3301: All versions

QDM4643: All versions

QDM4650: All versions

QDM5620: All versions

QDM5621: All versions

QDM5650: All versions

QDM5652: All versions

QDM5670: All versions

QDM5671: All versions

QDM5677: All versions

QDM5679: All versions

QET4101: All versions

QET5100: All versions

QET5100M: All versions

QET6100: All versions

QET6110: All versions

QFS2530: All versions

QFS2580: All versions

QFS2608: All versions

QFS2630: All versions

QLN1021AQ: All versions

QLN1031: All versions

QLN1036AQ: All versions

QLN4642: All versions

QLN4650: All versions

QLN5020: All versions

QLN5030: All versions

QLN5040: All versions

QPA2625: All versions

QPA5461: All versions

QPA5580: All versions

QPA5581: All versions

QPA6560: All versions

QPA8673: All versions

QPA8686: All versions

QPA8801: All versions

QPA8802: All versions

QPA8803: All versions

QPA8821: All versions

QPA8842: All versions

QPM4621: All versions

QPM4630: All versions

QPM4640: All versions

QPM4641: All versions

QPM4650: All versions

QPM5620: All versions

QPM5621: All versions

QPM5641: All versions

QPM5657: All versions

QPM5658: All versions

QPM5670: All versions

QPM5677: All versions

QPM5679: All versions

QPM5870: All versions

QPM5875: All versions

QPM6582: All versions

QPM6585: All versions

QPM6621: All versions

QPM6670: All versions

QPM8820: All versions

QPM8830: All versions

QPM8870: All versions

QPM8895: All versions

QSM7250: All versions

QTC800H: All versions

QTC801S: All versions

QTM525: All versions

SA415M: All versions

SD480: All versions

SD6905G: All versions

SD750G: All versions

SD765: All versions

SD765G: All versions

SD768G: All versions

SD845: All versions

SD855: All versions

SD8655G: All versions

SD870: All versions

SD8885G: All versions

SDR735: All versions

SDR735G: All versions

SDR8150: All versions

SDR8250: All versions

SDR845: All versions

SDR865: All versions

SDX55: All versions

SDX55M: All versions

SDXR25G: All versions

SM7250P: All versions

SMB1355: All versions

SMB1380: All versions

SMB1381: All versions

SMB1390: All versions

SMB1395: All versions

SMB1396: All versions

SMB1398: All versions

SMR525: All versions

SMR526: All versions

WCD9340: All versions

WCD9341: All versions

WCD9370: All versions

WCD9375: All versions

WCD9380: All versions

WCD9385: All versions

WCN3988: All versions

WCN3990: All versions

WCN3991: All versions

WCN3998: All versions

WCN6850: All versions

WCN6851: All versions

WCN6855: All versions

WCN6856: All versions

WSA8810: All versions

WSA8815: All versions

WSA8830: All versions

WSA8835: All versions

External links

http://www.qualcomm.com/company/product-security/bulletins/may-2021-bulletin


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

14) Input validation error

EUVDB-ID: #VU52805

Risk: Medium

CVSSv3.1: 6.5 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2020-11268

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to insufficient validation of user-supplied input in LTE implementation. Potential UE reset while decoding a crafted Sib1 or SIB1 that schedules unsupported SIBs and can lead to a remote denial of service.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

APQ8009: All versions

APQ8016: All versions

APQ8074: All versions

APQ8084: All versions

APQ8094: All versions

AR6003: All versions

MDM8215: All versions

MDM8215M: All versions

MDM8615M: All versions

MDM9215: All versions

MDM9235M: All versions

MDM9310: All versions

MDM9609: All versions

MDM9615: All versions

MDM9615M: All versions

MDM9635M: All versions

MDM9640: All versions

MDM9645: All versions

MSM8108: All versions

MSM8208: All versions

MSM8209: All versions

MSM8216: All versions

MSM8274: All versions

MSM8608: All versions

MSM8674: All versions

MSM8916: All versions

MSM8929: All versions

MSM8939: All versions

MSM8974: All versions

MSM8974P: All versions

MSM8994: All versions

PM8018: All versions

PM8841: All versions

PM8909: All versions

PM8916: All versions

PM8941: All versions

PM8994: All versions

PMD9635: All versions

PMD9645: All versions

PMI8994: All versions

QCA1990: All versions

QCA6174: All versions

QCA6174A: All versions

QCA6584: All versions

QFE1035: All versions

QFE1040: All versions

QFE1045: All versions

QFE1100: All versions

QFE1101: All versions

QFE1520: All versions

QFE1550: All versions

QFE2101: All versions

QFE2310: All versions

QFE2320: All versions

QFE2330: All versions

QFE2340: All versions

QFE2520: All versions

QFE2550: All versions

QFE2720: All versions

QFE3100: All versions

QFE3320: All versions

QFE3335: All versions

QFE3340: All versions

QFE3345: All versions

SD210: All versions

SMB1360: All versions

WCD9306: All versions

WCD9330: All versions

WCN3610: All versions

WCN3620: All versions

WCN3660: All versions

WCN3660A: All versions

WCN3660B: All versions

WCN3680: All versions

WCN3680B: All versions

WFR1620: All versions

WGR7640: All versions

WTR1605: All versions

WTR1605L: All versions

WTR1625: All versions

WTR1625L: All versions

WTR2605: All versions

WTR2955: All versions

WTR3925: All versions

WTR4605: All versions

WTR4905: All versions

External links

http://www.qualcomm.com/company/product-security/bulletins/may-2021-bulletin


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

15) Use-after-free

EUVDB-ID: #VU52820

Risk: Low

CVSSv3.1: 6.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-1927

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error in DSP Services within FastRPC driver. A local user can execute arbitrary code with elevated privileges.


Mitigation

Install updates from vendor's website.

Vulnerable software versions

APQ8009: All versions

APQ8009W: All versions

APQ8017: All versions

APQ8053: All versions

AQT1000: All versions

AR8031: All versions

AR8035: All versions

AR9380: All versions

CSR8811: All versions

CSRA6620: All versions

CSRA6640: All versions

CSRB31024: All versions

FSM10055: All versions

FSM10056: All versions

IPQ4018: All versions

IPQ4019: All versions

IPQ4028: All versions

IPQ4029: All versions

IPQ5010: All versions

IPQ5018: All versions

IPQ6000: All versions

IPQ6005: All versions

IPQ6010: All versions

IPQ6018: All versions

IPQ6028: All versions

IPQ8064: All versions

IPQ8065: All versions

IPQ8068: All versions

IPQ8070: All versions

IPQ8070A: All versions

IPQ8071: All versions

IPQ8071A: All versions

IPQ8072: All versions

IPQ8072A: All versions

IPQ8074: All versions

IPQ8074A: All versions

IPQ8076: All versions

IPQ8076A: All versions

IPQ8078: All versions

IPQ8078A: All versions

IPQ8173: All versions

IPQ8174: All versions

MSM8909W: All versions

MSM8917: All versions

MSM8953: All versions

PM215: All versions

PM3003A: All versions

PM4125: All versions

PM4250: All versions

PM439: All versions

PM456: All versions

PM6125: All versions

PM6150: All versions

PM6150A: All versions

PM6150L: All versions

PM6250: All versions

PM6350: All versions

PM640A: All versions

PM640L: All versions

PM640P: All versions

PM660: All versions

PM660A: All versions

PM660L: All versions

PM670: All versions

PM670A: All versions

PM670L: All versions

PM7150A: All versions

PM7150L: All versions

PM7250: All versions

PM7250B: All versions

PM7350C: All versions

PM8004: All versions

PM8005: All versions

PM8008: All versions

PM8009: All versions

PM8150: All versions

PM8150A: All versions

PM8150B: All versions

PM8150C: All versions

PM8150L: All versions

PM8250: All versions

PM8350: All versions

PM8350B: All versions

PM8350BH: All versions

PM8350BHS: All versions

PM8350C: All versions

PM855: All versions

PM855A: All versions

PM855B: All versions

PM855L: All versions

PM855P: All versions

PM8909: All versions

PM8916: All versions

PM8937: All versions

PM8953: All versions

PM8998: All versions

PMC1000H: All versions

PMD9655: All versions

PME605: All versions

PMI632: All versions

PMI8937: All versions

PMI8952: All versions

PMI8998: All versions

PMK7350: All versions

PMK8002: All versions

PMK8003: All versions

PMK8350: All versions

PMM6155AU: All versions

PMM8155AU: All versions

PMM8195AU: All versions

PMM855AU: All versions

PMP8074: All versions

PMR525: All versions

PMR735A: All versions

PMR735B: All versions

PMW3100: All versions

PMX24: All versions

PMX50: All versions

PMX55: All versions

QAT3514: All versions

QAT3516: All versions

QAT3518: All versions

QAT3519: All versions

QAT3522: All versions

QAT3550: All versions

QAT3555: All versions

QAT5515: All versions

QAT5516: All versions

QAT5522: All versions

QAT5533: All versions

QAT5568: All versions

QBT1500: All versions

QBT2000: All versions

QCA4020: All versions

QCA4024: All versions

QCA6174A: All versions

QCA6310: All versions

QCA6335: All versions

QCA6390: All versions

QCA6391: All versions

QCA6420: All versions

QCA6421: All versions

QCA6426: All versions

QCA6428: All versions

QCA6430: All versions

QCA6431: All versions

QCA6436: All versions

QCA6438: All versions

QCA6564A: All versions

QCA6564AU: All versions

QCA6574: All versions

QCA6574A: All versions

QCA6574AU: All versions

QCA6584AU: All versions

QCA6595AU: All versions

QCA6696: All versions

QCA7500: All versions

QCA8072: All versions

QCA8075: All versions

QCA8081: All versions

QCA8337: All versions

QCA9377: All versions

QCA9379: All versions

QCA9531: All versions

QCA9558: All versions

QCA9561: All versions

QCA9563: All versions

QCA9880: All versions

QCA9886: All versions

QCA9887: All versions

QCA9888: All versions

QCA9889: All versions

QCA9896: All versions

QCA9898: All versions

QCA9980: All versions

QCA9982: All versions

QCA9984: All versions

QCA9985: All versions

QCA9990: All versions

QCA9992: All versions

QCA9994: All versions

QCC1110: All versions

QCM2290: All versions

QCM4290: All versions

QCM6125: All versions

QCN5021: All versions

QCN5022: All versions

QCN5024: All versions

QCN5052: All versions

QCN5054: All versions

QCN5064: All versions

QCN5121: All versions

QCN5122: All versions

QCN5124: All versions

QCN5152: All versions

QCN5154: All versions

QCN5164: All versions

QCN5500: All versions

QCN5502: All versions

QCN5550: All versions

QCN6023: All versions

QCN6024: All versions

QCN9000: All versions

QCN9012: All versions

QCN9022: All versions

QCN9024: All versions

QCN9070: All versions

QCN9072: All versions

QCN9074: All versions

QCN9100: All versions

QCS2290: All versions

QCS405: All versions

QCS410: All versions

QCS4290: All versions

QCS603: All versions

QCS605: All versions

QCS610: All versions

QCS6125: All versions

QDM2301: All versions

QDM2302: All versions

QDM2305: All versions

QDM2307: All versions

QDM2308: All versions

QDM2310: All versions

QDM3301: All versions

QDM3302: All versions

QDM4643: All versions

QDM4650: All versions

QDM5579: All versions

QDM5620: All versions

QDM5621: All versions

QDM5650: All versions

QDM5652: All versions

QDM5670: All versions

QDM5671: All versions

QDM5677: All versions

QDM5679: All versions

QET4100: All versions

QET4101: All versions

QET5100: All versions

QET5100M: All versions

QET6100: All versions

QET6105: All versions

QET6110: All versions

QFE2101: All versions

QFE2520: All versions

QFE2550: All versions

QFE3340: All versions

QFE4301: All versions

QFE4302: All versions

QFE4303: All versions

QFE4305: All versions

QFE4308: All versions

QFE4309: All versions

QFE4320: All versions

QFE4373FC: All versions

QFS2530: All versions

QFS2580: All versions

QFS2608: All versions

QFS2630: All versions

QLN1020: All versions

QLN1021AQ: All versions

QLN1030: All versions

QLN1031: All versions

QLN1036AQ: All versions

QLN4640: All versions

QLN4642: All versions

QLN4650: All versions

QLN5020: All versions

QLN5030: All versions

QLN5040: All versions

QPA2625: All versions

QPA4340: All versions

QPA4360: All versions

QPA4361: All versions

QPA5373: All versions

QPA5460: All versions

QPA5461: All versions

QPA5580: All versions

QPA5581: All versions

QPA6560: All versions

QPA8673: All versions

QPA8675: All versions

QPA8686: All versions

QPA8801: All versions

QPA8802: All versions

QPA8803: All versions

QPA8821: All versions

QPA8842: All versions

QPM2630: All versions

QPM4621: All versions

QPM4630: All versions

QPM4640: All versions

QPM4641: All versions

QPM4650: All versions

QPM5541: All versions

QPM5577: All versions

QPM5579: All versions

QPM5620: All versions

QPM5621: All versions

QPM5641: All versions

QPM5657: All versions

QPM5658: All versions

QPM5670: All versions

QPM5677: All versions

QPM5679: All versions

QPM5870: All versions

QPM5875: All versions

QPM6325: All versions

QPM6375: All versions

QPM6582: All versions

QPM6585: All versions

QPM6621: All versions

QPM6670: All versions

QPM8820: All versions

QPM8830: All versions

QPM8870: All versions

QPM8895: All versions

QSM7250: All versions

QSM8250: All versions

QSW6310: All versions

QSW8573: All versions

QSW8574: All versions

QTC410S: All versions

QTC800H: All versions

QTC800S: All versions

QTC801S: All versions

QTM525: All versions

QTM527: All versions

Qualcomm215: All versions

RSW8577: All versions

SA2150P: All versions

SA415M: All versions

SA515M: All versions

SA6145P: All versions

SA6150P: All versions

SA6155: All versions

SA6155P: All versions

SA8150P: All versions

SA8155: All versions

SA8155P: All versions

SA8195P: All versions

SD675: All versions

SD8C: All versions

SD8CX: All versions

SD205: All versions

SD210: All versions

SD429: All versions

SD439: All versions

SD450: All versions

SD460: All versions

SD480: All versions

SD632: All versions

SD660: All versions

SD662: All versions

SD665: All versions

SD670: All versions

SD678: All versions

SD6905G: All versions

SD710: All versions

SD720G: All versions

SD730: All versions

SD750G: All versions

SD765: All versions

SD765G: All versions

SD768G: All versions

SD845: All versions

SD855: All versions

SD8655G: All versions

SD870: All versions

SD888: All versions

SD8885G: All versions

SDA429W: All versions

SDM429W: All versions

SDM830: All versions

SDR051: All versions

SDR052: All versions

SDR425: All versions

SDR660: All versions

SDR660G: All versions

SDR675: All versions

SDR735: All versions

SDR735G: All versions

SDR8150: All versions

SDR8250: All versions

SDR845: All versions

SDR865: All versions

SDW3100: All versions

SDX24: All versions

SDX50M: All versions

SDX55: All versions

SDX55M: All versions

SDXR1: All versions

SDXR25G: All versions

SM4125: All versions

SM6250: All versions

SM6250P: All versions

SM7250P: All versions

SM7350: All versions

SMB1351: All versions

SMB1354: All versions

SMB1355: All versions

SMB1358: All versions

SMB1360: All versions

SMB1380: All versions

SMB1381: All versions

SMB1390: All versions

SMB1394: All versions

SMB1395: All versions

SMB1396: All versions

SMB1398: All versions

SMB2351: All versions

SMR525: All versions

SMR526: All versions

SMR545: All versions

SMR546: All versions

WCD9326: All versions

WCD9335: All versions

WCD9340: All versions

WCD9341: All versions

WCD9360: All versions

WCD9370: All versions

WCD9371: All versions

WCD9375: All versions

WCD9380: All versions

WCD9385: All versions

WCN3610: All versions

WCN3615: All versions

WCN3620: All versions

WCN3660: All versions

WCN3660B: All versions

WCN3680: All versions

WCN3680B: All versions

WCN3910: All versions

WCN3950: All versions

WCN3980: All versions

WCN3988: All versions

WCN3990: All versions

WCN3991: All versions

WCN3998: All versions

WCN3999: All versions

WCN6740: All versions

WCN6850: All versions

WCN6851: All versions

WCN6855: All versions

WCN6856: All versions

WGR7640: All versions

WSA8810: All versions

WSA8815: All versions

WSA8830: All versions

WSA8835: All versions

WTR2955: All versions

WTR2965: All versions

WTR3925: All versions

WTR4905: All versions

WTR5975: All versions

WTR6955: All versions

External links

http://www.qualcomm.com/company/product-security/bulletins/may-2021-bulletin
http://source.codeaurora.org/quic/la/kernel/msm-4.14/commit/?id=85ecf9f98b520aa18e68ec426dc20fb63d02fd78


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

16) Reachable Assertion

EUVDB-ID: #VU52823

Risk: Medium

CVSSv3.1: 6.5 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-1925

CWE-ID: CWE-617 - Reachable Assertion

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a reachable assertion in WLAN when handling group management action frame. A remote attacker can send specially crafted traffic to the system and perform a denial of service attack.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

AQT1000: All versions

AR8031: All versions

AR8035: All versions

AR8151: All versions

AR9380: All versions

CSR8811: All versions

CSRA6620: All versions

CSRA6640: All versions

CSRB31024: All versions

IPQ4018: All versions

IPQ4028: All versions

IPQ4029: All versions

IPQ5010: All versions

IPQ5018: All versions

IPQ6000: All versions

IPQ6005: All versions

IPQ6010: All versions

IPQ6018: All versions

IPQ6028: All versions

IPQ8064: All versions

IPQ8069: All versions

IPQ8070: All versions

IPQ8070A: All versions

IPQ8071: All versions

IPQ8071A: All versions

IPQ8072: All versions

IPQ8072A: All versions

IPQ8074: All versions

IPQ8074A: All versions

IPQ8076: All versions

IPQ8076A: All versions

IPQ8078: All versions

IPQ8078A: All versions

IPQ8173: All versions

IPQ8174: All versions

PM3003A: All versions

PM4125: All versions

PM456: All versions

PM6125: All versions

PM6150: All versions

PM6150A: All versions

PM6150L: All versions

PM6250: All versions

PM6350: All versions

PM640A: All versions

PM640L: All versions

PM640P: All versions

PM660: All versions

PM660A: All versions

PM660L: All versions

PM670: All versions

PM670A: All versions

PM670L: All versions

PM7150A: All versions

PM7150L: All versions

PM7250: All versions

PM7250B: All versions

PM8004: All versions

PM8005: All versions

PM8008: All versions

PM8009: All versions

PM8150: All versions

PM8150A: All versions

PM8150B: All versions

PM8150C: All versions

PM8150L: All versions

PM8250: All versions

PM8350: All versions

PM8350B: All versions

PM8350BH: All versions

PM8350C: All versions

PM855: All versions

PM855A: All versions

PM855B: All versions

PM855L: All versions

PM855P: All versions

PM8998: All versions

PMC1000H: All versions

PMC7180: All versions

PMD9655: All versions

PME605: All versions

PMI632: All versions

PMI8998: All versions

PMK8002: All versions

PMK8003: All versions

PMK8350: All versions

PMM6155AU: All versions

PMM8155AU: All versions

PMM8195AU: All versions

PMM855AU: All versions

PMP8074: All versions

PMR525: All versions

PMR735A: All versions

PMR735B: All versions

PMX24: All versions

PMX50: All versions

PMX55: All versions

QAT3514: All versions

QAT3516: All versions

QAT3518: All versions

QAT3519: All versions

QAT3522: All versions

QAT3550: All versions

QAT3555: All versions

QAT5515: All versions

QAT5516: All versions

QAT5522: All versions

QAT5533: All versions

QAT5568: All versions

QBT1000: All versions

QBT1500: All versions

QBT2000: All versions

QCA1062: All versions

QCA1064: All versions

QCA2066: All versions

QCA4024: All versions

QCA6174A: All versions

QCA6175A: All versions

QCA6310: All versions

QCA6320: All versions

QCA6335: All versions

QCA6390: All versions

QCA6391: All versions

QCA6420: All versions

QCA6421: All versions

QCA6426: All versions

QCA6428: All versions

QCA6430: All versions

QCA6431: All versions

QCA6436: All versions

QCA6438: All versions

QCA6564A: All versions

QCA6564AU: All versions

QCA6574: All versions

QCA6574A: All versions

QCA6574AU: All versions

QCA6584AU: All versions

QCA6595: All versions

QCA6595AU: All versions

QCA6696: All versions

QCA8072: All versions

QCA8075: All versions

QCA8081: All versions

QCA8337: All versions

QCA9377: All versions

QCA9888: All versions

QCA9889: All versions

QCA9898: All versions

QCA9980: All versions

QCA9984: All versions

QCA9990: All versions

QCA9992: All versions

QCA9994: All versions

QCM2290: All versions

QCM6125: All versions

QCN5021: All versions

QCN5022: All versions

QCN5024: All versions

QCN5052: All versions

QCN5054: All versions

QCN5064: All versions

QCN5121: All versions

QCN5122: All versions

QCN5124: All versions

QCN5152: All versions

QCN5154: All versions

QCN5164: All versions

QCN5550: All versions

QCN6023: All versions

QCN6024: All versions

QCN7605: All versions

QCN7606: All versions

QCN9000: All versions

QCN9012: All versions

QCN9022: All versions

QCN9024: All versions

QCN9070: All versions

QCN9072: All versions

QCN9074: All versions

QCN9100: All versions

QCS2290: All versions

QCS405: All versions

QCS410: All versions

QCS603: All versions

QCS605: All versions

QCS610: All versions

QCS6125: All versions

QDM2301: All versions

QDM2302: All versions

QDM2305: All versions

QDM2307: All versions

QDM2308: All versions

QDM2310: All versions

QDM3301: All versions

QDM4643: All versions

QDM4650: All versions

QDM5620: All versions

QDM5621: All versions

QDM5650: All versions

QDM5652: All versions

QDM5670: All versions

QDM5671: All versions

QDM5677: All versions

QDM5679: All versions

QET4100: All versions

QET4101: All versions

QET4200AQ: All versions

QET5100: All versions

QET5100M: All versions

QET6100: All versions

QET6105: All versions

QET6110: All versions

QFE2080FC: All versions

QFE2081FC: All versions

QFE2082FC: All versions

QFE2101: All versions

QFE3100: All versions

QFE3440FC: All versions

QFE4455FC: All versions

QFE4465FC: All versions

QFS2530: All versions

QFS2580: All versions

QFS2608: All versions

QFS2630: All versions

QLN1020: All versions

QLN1021AQ: All versions

QLN1030: All versions

QLN1031: All versions

QLN1035BD: All versions

QLN1036AQ: All versions

QLN4640: All versions

QLN4642: All versions

QLN4650: All versions

QLN5020: All versions

QLN5030: All versions

QLN5040: All versions

QPA2625: All versions

QPA4340: All versions

QPA4360: All versions

QPA4361: All versions

QPA5460: All versions

QPA5461: All versions

QPA5580: All versions

QPA5581: All versions

QPA6560: All versions

QPA8673: All versions

QPA8675: All versions

QPA8686: All versions

QPA8688: All versions

QPA8801: All versions

QPA8802: All versions

QPA8803: All versions

QPA8821: All versions

QPA8842: All versions

QPM2630: All versions

QPM4621: All versions

QPM4630: All versions

QPM4640: All versions

QPM4641: All versions

QPM4650: All versions

QPM5541: All versions

QPM5577: All versions

QPM5579: All versions

QPM5620: All versions

QPM5621: All versions

QPM5641: All versions

QPM5657: All versions

QPM5658: All versions

QPM5670: All versions

QPM5677: All versions

QPM5679: All versions

QPM5870: All versions

QPM5875: All versions

QPM6325: All versions

QPM6375: All versions

QPM6582: All versions

QPM6585: All versions

QPM6621: All versions

QPM6670: All versions

QPM8820: All versions

QPM8830: All versions

QPM8870: All versions

QPM8895: All versions

QSM7250: All versions

QSM8350: All versions

QSW6310: All versions

QSW8573: All versions

QSW8574: All versions

QTC410S: All versions

QTC800H: All versions

QTC800S: All versions

QTC800T: All versions

QTC801S: All versions

QTM525: All versions

QTM527: All versions

RSW8577: All versions

SA2150P: All versions

SA415M: All versions

SA515M: All versions

SA6145P: All versions

SA6150P: All versions

SA6155: All versions

SA6155P: All versions

SA8150P: All versions

SA8155: All versions

SA8155P: All versions

SA8195P: All versions

SC8180X+SDX55: All versions

SD455: All versions

SD636: All versions

SD675: All versions

SD8C: All versions

SD8CX: All versions

SD460: All versions

SD480: All versions

SD660: All versions

SD662: All versions

SD665: All versions

SD670: All versions

SD678: All versions

SD6905G: All versions

SD710: All versions

SD712: All versions

SD720G: All versions

SD730: All versions

SD750G: All versions

SD765: All versions

SD765G: All versions

SD768G: All versions

SD7c: All versions

SD835: All versions

SD845: All versions

SD850: All versions

SD855: All versions

SD8655G: All versions

SD870: All versions

SD8885G: All versions

SDM630: All versions

SDM830: All versions

SDR051: All versions

SDR052: All versions

SDR425: All versions

SDR660: All versions

SDR660G: All versions

SDR675: All versions

SDR735: All versions

SDR735G: All versions

SDR8150: All versions

SDR8250: All versions

SDR845: All versions

SDR865: All versions

SDX50M: All versions

SDX55: All versions

SDX55M: All versions

SDXR1: All versions

SDXR25G: All versions

SM4125: All versions

SM6250: All versions

SM6250P: All versions

SM7250P: All versions

SMB1351: All versions

SMB1354: All versions

SMB1355: All versions

SMB1380: All versions

SMB1381: All versions

SMB1390: All versions

SMB1395: All versions

SMB1396: All versions

SMB1398: All versions

SMB2351: All versions

SMR525: All versions

SMR526: All versions

SMR545: All versions

SMR546: All versions

WCD9326: All versions

WCD9335: All versions

WCD9340: All versions

WCD9341: All versions

WCD9360: All versions

WCD9370: All versions

WCD9371: All versions

WCD9375: All versions

WCD9380: All versions

WCD9385: All versions

WCN3910: All versions

WCN3950: All versions

WCN3980: All versions

WCN3988: All versions

WCN3990: All versions

WCN3991: All versions

WCN3998: All versions

WCN3999: All versions

WCN6745: All versions

WCN6850: All versions

WCN6851: All versions

WCN6855: All versions

WCN6856: All versions

WGR7640: All versions

WHS9410: All versions

WSA8810: All versions

WSA8815: All versions

WSA8830: All versions

WSA8835: All versions

WTR2965: All versions

WTR3925: All versions

WTR5975: All versions

WTR6955: All versions

External links

http://www.qualcomm.com/company/product-security/bulletins/may-2021-bulletin


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

17) Buffer Over-read

EUVDB-ID: #VU52824

Risk:

CVSSv3.1: 3.4 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N/E:U/RL:O/RC:C]

CVE-ID: CVE-2020-11293

CWE-ID: CWE-126 - Buffer over-read

Exploit availability: No

Description

The vulnerability allows a local user to gain access to sensitive information.

The vulnerability exists due to a buffer over-read in Content Protection within Widevine TA. A local privileged user can gain access to sensitive information.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

APQ8017: All versions

APQ8037: All versions

APQ8053: All versions

APQ8064AU: All versions

APQ8096AU: All versions

AQT1000: All versions

AR8031: All versions

AR8035: All versions

AR8151: All versions

CSRA6620: All versions

CSRA6640: All versions

CSRB31024: All versions

FSM10055: All versions

FSM10056: All versions

MDM9205: All versions

MDM9640: All versions

MDM9650: All versions

MDM9655: All versions

MSM8917: All versions

MSM8920: All versions

MSM8937: All versions

MSM8940: All versions

MSM8953: All versions

MSM8996AU: All versions

PM215: All versions

PM3003A: All versions

PM4125: All versions

PM4250: All versions

PM439: All versions

PM456: All versions

PM6125: All versions

PM6150: All versions

PM6150A: All versions

PM6150L: All versions

PM6250: All versions

PM6350: All versions

PM640A: All versions

PM640L: All versions

PM640P: All versions

PM660: All versions

PM660A: All versions

PM660L: All versions

PM670: All versions

PM670A: All versions

PM670L: All versions

PM7250B: All versions

PM8004: All versions

PM8005: All versions

PM8008: All versions

PM8009: All versions

PM8019: All versions

PM8150: All versions

PM8150A: All versions

PM8150B: All versions

PM8150C: All versions

PM8150L: All versions

PM8250: All versions

PM8350: All versions

PM855: All versions

PM855A: All versions

PM855B: All versions

PM855L: All versions

PM855P: All versions

PM8916: All versions

PM8937: All versions

PM8940: All versions

PM8953: All versions

PM8996: All versions

PM8998: All versions

PMC1000H: All versions

PMD9655: All versions

PME605: All versions

PMI632: All versions

PMI8937: All versions

PMI8940: All versions

PMI8952: All versions

PMI8994: All versions

PMI8996: All versions

PMI8998: All versions

PMK8001: All versions

PMK8002: All versions

PMK8003: All versions

PMM6155AU: All versions

PMM8155AU: All versions

PMM8195AU: All versions

PMM855AU: All versions

PMM8996AU: All versions

PMR525: All versions

PMR735A: All versions

PMW3100: All versions

PMX24: All versions

PMX50: All versions

PMX55: All versions

QAT3514: All versions

QAT3518: All versions

QAT3519: All versions

QAT3522: All versions

QAT3550: All versions

QAT3555: All versions

QAT5515: All versions

QAT5516: All versions

QAT5522: All versions

QBT1000: All versions

QBT1500: All versions

QBT2000: All versions

QCA4004: All versions

QCA4020: All versions

QCA6174A: All versions

QCA6175A: All versions

QCA6234: All versions

QCA6310: All versions

QCA6320: All versions

QCA6335: All versions

QCA6390: All versions

QCA6391: All versions

QCA6420: All versions

QCA6421: All versions

QCA6426: All versions

QCA6430: All versions

QCA6431: All versions

QCA6436: All versions

QCA6564: All versions

QCA6564A: All versions

QCA6564AU: All versions

QCA6574: All versions

QCA6574A: All versions

QCA6574AU: All versions

QCA6584AU: All versions

QCA6595: All versions

QCA6595AU: All versions

QCA6694: All versions

QCA6694AU: All versions

QCA6696: All versions

QCA8337: All versions

QCA9377: All versions

QCA9379: All versions

QCA9984: All versions

QCC112: All versions

QCM2290: All versions

QCM4290: All versions

QCS2290: All versions

QCS405: All versions

QCS410: All versions

QCS4290: All versions

QCS603: All versions

QCS605: All versions

QCS610: All versions

QDM2301: All versions

QDM2302: All versions

QDM2307: All versions

QDM2308: All versions

QDM2310: All versions

QET4100: All versions

QET4101: All versions

QET4200AQ: All versions

QET5100: All versions

QET5100M: All versions

QET6100: All versions

QET6105: All versions

QFE2080FC: All versions

QFE2081FC: All versions

QFE2082FC: All versions

QFE2101: All versions

QFE2520: All versions

QFE2550: All versions

QFE3100: All versions

QFE3340: All versions

QFE3440FC: All versions

QFE4301: All versions

QFE4302: All versions

QFE4303: All versions

QFE4305: All versions

QFE4308: All versions

QFE4309: All versions

QFE4320: All versions

QFE4373FC: All versions

QFE4455FC: All versions

QFE4465FC: All versions

QFS2530: All versions

QFS2580: All versions

QLN1020: All versions

QLN1021AQ: All versions

QLN1030: All versions

QLN1031: All versions

QLN1035BD: All versions

QLN1036AQ: All versions

QLN4640: All versions

QLN5030: All versions

QPA4340: All versions

QPA4360: All versions

QPA4361: All versions

QPA5373: All versions

QPA5460: All versions

QPA6560: All versions

QPA8673: All versions

QPA8675: All versions

QPA8686: All versions

QPA8688: All versions

QPA8801: All versions

QPA8802: All versions

QPA8803: All versions

QPA8821: All versions

QPM2630: All versions

QPM8820: All versions

QPM8870: All versions

QSW6310: All versions

QSW8573: All versions

QSW8574: All versions

QTC410S: All versions

QTC800H: All versions

QTC800S: All versions

QTC800T: All versions

QTC801S: All versions

QTM525: All versions

Qualcomm215: All versions

RGR7640AU: All versions

RSW8577: All versions

SA2150P: All versions

SA415M: All versions

SA515M: All versions

SA6145P: All versions

SA6150P: All versions

SA6155: All versions

SA6155P: All versions

SA8150P: All versions

SA8155: All versions

SA8155P: All versions

SA8195P: All versions

SC8180X+SDX55: All versions

SD455: All versions

SD636: All versions

SD675: All versions

SD8C: All versions

SD8CX: All versions

SD429: All versions

SD439: All versions

SD450: All versions

SD460: All versions

SD480: All versions

SD632: All versions

SD660: All versions

SD662: All versions

SD665: All versions

SD670: All versions

SD678: All versions

SD710: All versions

SD712: All versions

SD720G: All versions

SD730: All versions

SD7c: All versions

SD820: All versions

SD821: All versions

SD835: All versions

SD845: All versions

SD850: All versions

SD855: All versions

SD8655G: All versions

SD870: All versions

SD8885G: All versions

SDA429W: All versions

SDM429W: All versions

SDM630: All versions

SDM830: All versions

SDR051: All versions

SDR052: All versions

SDR105: All versions

SDR425: All versions

SDR660: All versions

SDR660G: All versions

SDR675: All versions

SDR735: All versions

SDR735G: All versions

SDR8150: All versions

SDR8250: All versions

SDR845: All versions

SDR865: All versions

SDX24: All versions

SDX50M: All versions

SDX55: All versions

SDX55M: All versions

SDXR1: All versions

SDXR25G: All versions

SM4125: All versions

SM6250: All versions

SM6250P: All versions

SMB1350: All versions

SMB1351: All versions

SMB1354: All versions

SMB1355: All versions

SMB1358: All versions

SMB1360: All versions

SMB1380: All versions

SMB1381: All versions

SMB1390: All versions

SMB1396: All versions

SMB231: All versions

SMB2351: All versions

SMR525: All versions

SMR526: All versions

SMR545: All versions

SMR546: All versions

WCD9306: All versions

WCD9326: All versions

WCD9335: All versions

WCD9340: All versions

WCD9341: All versions

WCD9360: All versions

WCD9370: All versions

WCD9371: All versions

WCD9375: All versions

WCD9380: All versions

WCD9385: All versions

WCN3610: All versions

WCN3615: All versions

WCN3620: All versions

WCN3660: All versions

WCN3660B: All versions

WCN3680B: All versions

WCN3910: All versions

WCN3950: All versions

WCN3980: All versions

WCN3988: All versions

WCN3990: All versions

WCN3991: All versions

WCN3998: All versions

WCN3999: All versions

WCN6850: All versions

WGR7640: All versions

WHS9410: All versions

WSA8810: All versions

WSA8815: All versions

WTR2955: All versions

WTR2965: All versions

WTR3905: All versions

WTR3925: All versions

WTR3950: All versions

WTR4905: All versions

WTR5975: All versions

WTR6955: All versions

External links

http://www.qualcomm.com/company/product-security/bulletins/may-2021-bulletin


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

18) Improper Validation of Array Index

EUVDB-ID: #VU52825

Risk: Low

CVSSv3.1: 4.6 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C]

CVE-ID: CVE-2020-11294

CWE-ID: CWE-129 - Improper Validation of Array Index

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to improper validation of array index in radio interface layer when logging data. A local user can escalate privileges on the system.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

AR8035: All versions

PM215: All versions

PM3003A: All versions

PM6125: All versions

PM6150: All versions

PM6150A: All versions

PM6150L: All versions

PM6350: All versions

PM640A: All versions

PM640L: All versions

PM640P: All versions

PM670: All versions

PM670L: All versions

PM7150A: All versions

PM7150L: All versions

PM7250: All versions

PM7250B: All versions

PM8005: All versions

PM8008: All versions

PM8009: All versions

PM8150A: All versions

PM8150B: All versions

PM8150C: All versions

PM8150L: All versions

PM8250: All versions

PM8350: All versions

PM8350B: All versions

PM8350BH: All versions

PM8350C: All versions

PM855: All versions

PM855B: All versions

PM855L: All versions

PM8909: All versions

PM8998: All versions

PMI632: All versions

PMI8998: All versions

PMK8002: All versions

PMK8003: All versions

PMK8350: All versions

PMM6155AU: All versions

PMM8155AU: All versions

PMM8195AU: All versions

PMM855AU: All versions

PMR525: All versions

PMR735A: All versions

PMR735B: All versions

PMW3100: All versions

PMX55: All versions

QAT3516: All versions

QAT3518: All versions

QAT3519: All versions

QAT3522: All versions

QAT3550: All versions

QAT3555: All versions

QAT5515: All versions

QAT5516: All versions

QAT5522: All versions

QAT5533: All versions

QAT5568: All versions

QBT1500: All versions

QBT2000: All versions

QCA6175A: All versions

QCA6390: All versions

QCA6391: All versions

QCA6421: All versions

QCA6426: All versions

QCA6431: All versions

QCA6436: All versions

QCA6564A: All versions

QCA6564AU: All versions

QCA6574: All versions

QCA6574A: All versions

QCA6574AU: All versions

QCA6584AU: All versions

QCA6595: All versions

QCA6595AU: All versions

QCA6696: All versions

QCA8337: All versions

QCM4290: All versions

QCM6125: All versions

QCS4290: All versions

QCS605: All versions

QCS6125: All versions

QDM2301: All versions

QDM2302: All versions

QDM2305: All versions

QDM3301: All versions

QDM4643: All versions

QDM4650: All versions

QDM5620: All versions

QDM5621: All versions

QDM5650: All versions

QDM5652: All versions

QDM5670: All versions

QDM5671: All versions

QDM5677: All versions

QDM5679: All versions

QET4101: All versions

QET4200AQ: All versions

QET5100: All versions

QET5100M: All versions

QET6100: All versions

QET6105: All versions

QET6110: All versions

QFS2530: All versions

QFS2580: All versions

QFS2608: All versions

QFS2630: All versions

QLN1021AQ: All versions

QLN1031: All versions

QLN1036AQ: All versions

QLN4642: All versions

QLN4650: All versions

QLN5020: All versions

QLN5030: All versions

QLN5040: All versions

QPA2625: All versions

QPA4360: All versions

QPA4361: All versions

QPA5460: All versions

QPA5461: All versions

QPA5580: All versions

QPA5581: All versions

QPA6560: All versions

QPA8673: All versions

QPA8686: All versions

QPA8801: All versions

QPA8802: All versions

QPA8803: All versions

QPA8821: All versions

QPA8842: All versions

QPM4621: All versions

QPM4630: All versions

QPM4640: All versions

QPM4641: All versions

QPM4650: All versions

QPM5621: All versions

QPM5641: All versions

QPM5658: All versions

QPM5670: All versions

QPM5677: All versions

QPM5679: All versions

QPM5870: All versions

QPM5875: All versions

QPM6582: All versions

QPM6585: All versions

QPM6621: All versions

QPM6670: All versions

QPM8820: All versions

QPM8870: All versions

QPM8895: All versions

QSM7250: All versions

QSW6310: All versions

QSW8573: All versions

QSW8574: All versions

QTC410S: All versions

QTC800H: All versions

QTC800S: All versions

QTC801S: All versions

QTM525: All versions

QTM527: All versions

Qualcomm215: All versions

SA2150P: All versions

SA515M: All versions

SA6145P: All versions

SA6150P: All versions

SA6155: All versions

SA6155P: All versions

SA8150P: All versions

SA8155: All versions

SA8155P: All versions

SA8195P: All versions

SD205: All versions

SD210: All versions

SD429: All versions

SD460: All versions

SD480: All versions

SD662: All versions

SD665: All versions

SD675: All versions

SD765: All versions

SD765G: All versions

SD768G: All versions

SD855: All versions

SD8655G: All versions

SD870: All versions

SD888: All versions

SD8885G: All versions

SDA429W: All versions

SDM429W: All versions

SDM830: All versions

SDR425: All versions

SDR660: All versions

SDR660G: All versions

SDR735: All versions

SDR735G: All versions

SDR8250: All versions

SDR865: All versions

SDX55: All versions

SDX55M: All versions

SDXR25G: All versions

SM7250P: All versions

SMB1354: All versions

SMB1355: All versions

SMB1381: All versions

SMB1390: All versions

SMB1395: All versions

SMB1396: All versions

SMB1398: All versions

SMR525: All versions

SMR526: All versions

SMR545: All versions

SMR546: All versions

WCD9326: All versions

WCD9340: All versions

WCD9341: All versions

WCD9360: All versions

WCD9370: All versions

WCD9375: All versions

WCD9380: All versions

WCD9385: All versions

WCN3610: All versions

WCN3615: All versions

WCN3620: All versions

WCN3660B: All versions

WCN3680: All versions

WCN3950: All versions

WCN3980: All versions

WCN3988: All versions

WCN3990: All versions

WCN3991: All versions

WCN3998: All versions

WCN6750: All versions

WCN6850: All versions

WCN6851: All versions

WGR7640: All versions

WSA8810: All versions

WSA8815: All versions

WSA8830: All versions

WSA8835: All versions

WTR2965: All versions

WTR3925: All versions

WTR4905: All versions

WTR5975: All versions

External links

http://www.qualcomm.com/company/product-security/bulletins/may-2021-bulletin


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

19) Use-after-free

EUVDB-ID: #VU52826

Risk: Low

CVSSv3.1: 6.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2020-11295

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error in camera If the threadmanager is being cleaned up while the worker thread is processing objects. A local user can escalate privileges on the system.


Mitigation

Install updates from vendor's website.

Vulnerable software versions

FSM10055: All versions

FSM10056: All versions

PM3003A: All versions

PM6125: All versions

PM6150: All versions

PM6150A: All versions

PM6150L: All versions

PM6350: All versions

PM660: All versions

PM660L: All versions

PM7250B: All versions

PM8008: All versions

PM8009: All versions

PM8150A: All versions

PM8150B: All versions

PM8150C: All versions

PM8150L: All versions

PM8250: All versions

PM8350: All versions

PM8350B: All versions

PM8350BH: All versions

PM8350C: All versions

PMI632: All versions

PMK8002: All versions

PMK8003: All versions

PMK8350: All versions

PMM6155AU: All versions

PMM8155AU: All versions

PMM8195AU: All versions

PMM855AU: All versions

PMR525: All versions

PMR735A: All versions

PMR735B: All versions

PMX55: All versions

QAT3516: All versions

QAT3518: All versions

QAT3519: All versions

QAT3555: All versions

QAT5515: All versions

QAT5516: All versions

QAT5522: All versions

QAT5568: All versions

QBT1500: All versions

QBT2000: All versions

QCA6390: All versions

QCA6391: All versions

QCA6421: All versions

QCA6426: All versions

QCA6431: All versions

QCA6436: All versions

QCA6564A: All versions

QCA6564AU: All versions

QCA6574: All versions

QCA6574A: All versions

QCA6574AU: All versions

QCA6595: All versions

QCA6595AU: All versions

QCA6696: All versions

QCM4290: All versions

QCS410: All versions

QCS4290: All versions

QCS610: All versions

QDM3301: All versions

QDM4643: All versions

QDM4650: All versions

QDM5620: All versions

QDM5621: All versions

QDM5670: All versions

QDM5671: All versions

QET5100: All versions

QET5100M: All versions

QET6100: All versions

QET6105: All versions

QET6110: All versions

QFS2530: All versions

QFS2580: All versions

QFS2608: All versions

QFS2630: All versions

QLN4642: All versions

QLN4650: All versions

QLN5020: All versions

QLN5030: All versions

QLN5040: All versions

QPA2625: All versions

QPA5461: All versions

QPA5580: All versions

QPA5581: All versions

QPA8801: All versions

QPA8802: All versions

QPA8803: All versions

QPA8821: All versions

QPA8842: All versions

QPM4621: All versions

QPM4630: All versions

QPM4640: All versions

QPM4641: All versions

QPM4650: All versions

QPM5621: All versions

QPM5641: All versions

QPM5670: All versions

QPM5677: All versions

QPM5679: All versions

QPM5870: All versions

QPM5875: All versions

QPM6585: All versions

QPM6621: All versions

QPM6670: All versions

QPM8820: All versions

QPM8870: All versions

QTC800H: All versions

QTC800S: All versions

QTC801S: All versions

QTM525: All versions

SA6145P: All versions

SA6150P: All versions

SA6155: All versions

SA6155P: All versions

SA8150P: All versions

SA8155: All versions

SA8155P: All versions

SA8195P: All versions

SD460: All versions

SD480: All versions

SD662: All versions

SD670: All versions

SD710: All versions

SD8655G: All versions

SD870: All versions

SD888: All versions

SD8885G: All versions

SDR425: All versions

SDR660: All versions

SDR660G: All versions

SDR735: All versions

SDR735G: All versions

SDR8250: All versions

SDR865: All versions

SDX55M: All versions

SDXR1: All versions

SDXR25G: All versions

SMB1351: All versions

SMB1354: All versions

SMB1355: All versions

SMB1390: All versions

SMB1396: All versions

SMB1398: All versions

SMR525: All versions

SMR526: All versions

SMR545: All versions

SMR546: All versions

WCD9326: All versions

WCD9341: All versions

WCD9370: All versions

WCD9375: All versions

WCD9380: All versions

WCD9385: All versions

WCN3950: All versions

WCN3980: All versions

WCN3988: All versions

WCN3990: All versions

WCN3991: All versions

WCN6750: All versions

WCN6850: All versions

WCN6851: All versions

WCN6855: All versions

WCN6856: All versions

WGR7640: All versions

WSA8810: All versions

WSA8815: All versions

WSA8830: All versions

WSA8835: All versions

WTR2965: All versions

WTR3925: All versions

External links

http://www.qualcomm.com/company/product-security/bulletins/may-2021-bulletin


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

20) NULL pointer dereference

EUVDB-ID: #VU52827

Risk: Low

CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2020-11254

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error in DSP. A local user can dereference the session ctx pointer and perform a denial of service attack.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

PM6150A: All versions

PM6150L: All versions

PM6350: All versions

PM660: All versions

PM660L: All versions

PM7250B: All versions

PM8008: All versions

PM8009: All versions

PM8350: All versions

PM8350B: All versions

PM8350BH: All versions

PM8350C: All versions

PMK8003: All versions

PMK8350: All versions

PMM6155AU: All versions

PMM8155AU: All versions

PMM8195AU: All versions

PMR735A: All versions

PMR735B: All versions

QAT3516: All versions

QAT3518: All versions

QAT3519: All versions

QAT3555: All versions

QAT5515: All versions

QAT5516: All versions

QAT5522: All versions

QAT5568: All versions

QBT1500: All versions

QCA6574AU: All versions

QCA6696: All versions

QDM3301: All versions

QDM4643: All versions

QDM4650: All versions

QDM5620: All versions

QDM5621: All versions

QDM5670: All versions

QDM5671: All versions

QET5100: All versions

QET5100M: All versions

QET6100: All versions

QET6105: All versions

QET6110: All versions

QFS2530: All versions

QFS2580: All versions

QFS2608: All versions

QFS2630: All versions

QLN4642: All versions

QLN4650: All versions

QLN5020: All versions

QLN5030: All versions

QLN5040: All versions

QPA2625: All versions

QPA5461: All versions

QPA5580: All versions

QPA5581: All versions

QPA8801: All versions

QPA8802: All versions

QPA8803: All versions

QPA8821: All versions

QPA8842: All versions

QPM4621: All versions

QPM4630: All versions

QPM4640: All versions

QPM4641: All versions

QPM4650: All versions

QPM5621: All versions

QPM5641: All versions

QPM5670: All versions

QPM5677: All versions

QPM5679: All versions

QPM5870: All versions

QPM5875: All versions

QPM6585: All versions

QPM6621: All versions

QPM6670: All versions

QPM8820: All versions

QPM8870: All versions

QTC800H: All versions

QTC800S: All versions

QTC801S: All versions

QTM525: All versions

SA6145P: All versions

SA6150P: All versions

SA6155P: All versions

SA8150P: All versions

SA8155P: All versions

SA8195P: All versions

SD480: All versions

SD670: All versions

SD710: All versions

SD888: All versions

SD8885G: All versions

SDR660: All versions

SDR660G: All versions

SDR735: All versions

SDR735G: All versions

SDR865: All versions

SDXR1: All versions

SMB1351: All versions

SMB1355: All versions

SMB1396: All versions

SMB1398: All versions

SMR526: All versions

SMR545: All versions

SMR546: All versions

WCD9326: All versions

WCD9341: All versions

WCD9370: All versions

WCD9375: All versions

WCD9380: All versions

WCD9385: All versions

WCN3980: All versions

WCN3988: All versions

WCN3990: All versions

WCN3991: All versions

WCN6850: All versions

WCN6851: All versions

WCN6855: All versions

WCN6856: All versions

WSA8830: All versions

WSA8835: All versions

External links

http://www.qualcomm.com/company/product-security/bulletins/may-2021-bulletin
http://source.codeaurora.org/quic/la/kernel/msm-5.4/commit/?id=9900d61a478ba8403b0e3bf22cf50b18973bc3c1


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.



###SIDEBAR###