VulnerabilityModified
CVE-2021-1918
Improper handling of resource allocation in virtual machines can lead to information exposure in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
MEDIUM 6.5EPSS 0.14%
Does this matter?
Lower severity and a low EPSS score (0.14%). Track it; it rarely justifies an emergency change on its own.
Description
Improper handling of resource allocation in virtual machines can lead to information exposure in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
- CVSS 3.1
- 6.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
- EPSS
- 0.14% probability · 4th percentile
- Public exploits
- None in Exploit-DB
- CISA KEV
- Not listed
- Weakness
- CWE-668
- Affected
- qualcomm/qca6391 firmware · qualcomm/qcm6490 firmware · qualcomm/qcs6490 firmware · qualcomm/qrb5165 firmware · qualcomm/qrb5165n firmware · qualcomm/sd690 5g firmware · qualcomm/sd750g firmware · qualcomm/sd765 firmware · qualcomm/sd765g firmware · qualcomm/sd768g firmware · qualcomm/sd778g firmware · qualcomm/sd888 5g firmware · qualcomm/sm7250p firmware · qualcomm/sm7325p firmware · qualcomm/wcd9370 firmware · qualcomm/wcd9375 firmware · qualcomm/wcd9380 firmware · qualcomm/wcd9385 firmware · qualcomm/wcn3988 firmware · qualcomm/wcn3991 firmware · +10 more
- Source
- product-security@qualcomm.com
EPSS 0.1% since 26 October 2026; no change recorded yet. Points are recorded when the score first appears and whenever it moves by a percentage point or more.
References
Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.