SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2021-1918

Improper handling of resource allocation in virtual machines can lead to information exposure in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

MEDIUM 6.5EPSS 0.14%

Does this matter?

Lower severity and a low EPSS score (0.14%). Track it; it rarely justifies an emergency change on its own.

Description

Improper handling of resource allocation in virtual machines can lead to information exposure in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

CVSS 3.1
6.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
EPSS
0.14% probability · 4th percentile
CISA KEV
Not listed
Weakness
CWE-668
Affected
qualcomm/qca6391 firmware · qualcomm/qcm6490 firmware · qualcomm/qcs6490 firmware · qualcomm/qrb5165 firmware · qualcomm/qrb5165n firmware · qualcomm/sd690 5g firmware · qualcomm/sd750g firmware · qualcomm/sd765 firmware · qualcomm/sd765g firmware · qualcomm/sd768g firmware · qualcomm/sd778g firmware · qualcomm/sd888 5g firmware · qualcomm/sm7250p firmware · qualcomm/sm7325p firmware · qualcomm/wcd9370 firmware · qualcomm/wcd9375 firmware · qualcomm/wcd9380 firmware · qualcomm/wcd9385 firmware · qualcomm/wcn3988 firmware · qualcomm/wcn3991 firmware · +10 more
Source
product-security@qualcomm.com

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.