{"id":"CVE-2021-1909","url":"https://www.cyber-defence.io/tools/cve/CVE-2021-1909","generatedAt":"2026-10-28T06:48:45.169Z","title":"Buffer overflow occurs in trusted applications due to lack of length check of parameters in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…","description":"Buffer overflow occurs in trusted applications due to lack of length check of parameters in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking","published":"2021-09-09T08:15:08.000Z","lastModified":"2026-06-17T03:32:49.000Z","status":"Modified","sourceIdentifier":"product-security@qualcomm.com","cvss":{"version":"3.1","score":7.8,"severity":"HIGH","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},"cwe":["CWE-120"],"affected":["qualcomm/apq8009 firmware","qualcomm/apq8009w firmware","qualcomm/apq8016 firmware","qualcomm/apq8017 firmware","qualcomm/apq8037 firmware","qualcomm/apq8052 firmware","qualcomm/apq8053 firmware","qualcomm/apq8056 firmware","qualcomm/apq8062 firmware","qualcomm/apq8064 firmware","qualcomm/apq8064au firmware","qualcomm/apq8076 firmware","qualcomm/apq8084 firmware","qualcomm/apq8096au firmware","qualcomm/aqt1000 firmware","qualcomm/ar3012 firmware","qualcomm/ar7420 firmware","qualcomm/ar8031 firmware","qualcomm/ar8035 firmware","qualcomm/ar9380 firmware","qualcomm/ar9580 firmware","qualcomm/csr6030 firmware","qualcomm/csr8811 firmware","qualcomm/csra6620 firmware","qualcomm/csra6640 firmware","qualcomm/csrb31024 firmware","qualcomm/fsm10055 firmware","qualcomm/fsm10056 firmware","qualcomm/fsm9900 firmware","qualcomm/fsm9905 firmware","qualcomm/fsm9910 firmware","qualcomm/fsm9915 firmware","qualcomm/fsm9916 firmware","qualcomm/fsm9950 firmware","qualcomm/fsm9955 firmware","qualcomm/ipq4018 firmware","qualcomm/ipq4019 firmware","qualcomm/ipq4028 firmware","qualcomm/ipq4029 firmware","qualcomm/ipq5010 firmware","qualcomm/ipq5018 firmware","qualcomm/ipq5028 firmware","qualcomm/ipq6000 firmware","qualcomm/ipq6005 firmware","qualcomm/ipq6010 firmware","qualcomm/ipq6018 firmware","qualcomm/ipq6028 firmware","qualcomm/ipq8062 firmware","qualcomm/ipq8064 firmware","qualcomm/ipq8065 firmware","qualcomm/ipq8066 firmware","qualcomm/ipq8068 firmware","qualcomm/ipq8069 firmware","qualcomm/ipq8070 firmware","qualcomm/ipq8070a firmware","qualcomm/ipq8071 firmware","qualcomm/ipq8071a firmware","qualcomm/ipq8072 firmware","qualcomm/ipq8072a firmware","qualcomm/ipq8074 firmware"],"epss":{"score":0.00158,"percentile":0.04932,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (0.16%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"https://www.qualcomm.com/company/product-security/bulletins/september-2021-bulletin","tags":["Vendor Advisory"],"source":"product-security@qualcomm.com"},{"url":"https://www.qualcomm.com/company/product-security/bulletins/september-2021-bulletin","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2021-1909","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}