VULNERABILITY INTELLIGENCE
CVE-2021-1968
CVSS score6.2 MEDIUM
EPSS probability0.17%
CISA KEVNot currently listed
Published2021-10-20
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Description
Improper validation of kernel buffer address while copying information back to user buffer can lead to kernel memory information exposure to user space in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Weakness classification
- CWE-20: Improper Input Validation
Primary references
- product-security@qualcomm.com
- product-security@qualcomm.com — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory