VulnerabilityModified

CVE-2021-1964

Possible buffer over read due to improper validation of IE size while parsing beacon from peer device in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon…

HIGH 7.5EPSS 0.59%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (0.59%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

CVSS 3.1: 7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS: 0.59% probability · 48th percentile
Public exploits: None in Exploit-DB
CISA KEV: Not listed
Weakness: CWE-125
Affected: qualcomm/apq8053 firmware · qualcomm/aqt1000 firmware · qualcomm/ar8035 firmware · qualcomm/ar9380 firmware · qualcomm/csr8811 firmware · qualcomm/csrb31024 firmware · qualcomm/ipq4018 firmware · qualcomm/ipq4019 firmware · qualcomm/ipq4028 firmware · qualcomm/ipq4029 firmware · qualcomm/ipq5010 firmware · qualcomm/ipq5018 firmware · qualcomm/ipq5028 firmware · qualcomm/ipq6000 firmware · qualcomm/ipq6005 firmware · qualcomm/ipq6010 firmware · qualcomm/ipq6018 firmware · qualcomm/ipq6028 firmware · qualcomm/ipq8064 firmware · qualcomm/ipq8065 firmware · +40 more
Source: product-security@qualcomm.com

EPSS trend

EPSS 0.6% since 26 October 2026; no change recorded yet. Points are recorded when the score first appears and whenever it moves by a percentage point or more.

References

https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletinPatch, Vendor Advisory
https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletinPatch, Vendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.