{"id":"CVE-2021-1968","url":"https://www.cyber-defence.io/tools/cve/CVE-2021-1968","generatedAt":"2026-10-27T20:19:40.589Z","title":"Improper validation of kernel buffer address while copying information back to user buffer can lead to kernel memory information exposure to user space in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…","description":"Improper validation of kernel buffer address while copying information back to user buffer can lead to kernel memory information exposure to user space in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables","published":"2021-10-20T07:15:08.000Z","lastModified":"2026-06-17T03:33:04.000Z","status":"Modified","sourceIdentifier":"product-security@qualcomm.com","cvss":{"version":"3.1","score":5.5,"severity":"MEDIUM","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},"cwe":["CWE-20"],"affected":["qualcomm/aqt1000 firmware","qualcomm/ar8031 firmware","qualcomm/ar8035 firmware","qualcomm/csra6620 firmware","qualcomm/csra6640 firmware","qualcomm/fsm10055 firmware","qualcomm/fsm10056 firmware","qualcomm/mdm9150 firmware","qualcomm/qca6391 firmware","qualcomm/qca6420 firmware","qualcomm/qca6430 firmware","qualcomm/qca6574 firmware","qualcomm/qca6574a firmware","qualcomm/qca6574au firmware","qualcomm/qca6584au firmware","qualcomm/qca6595 firmware","qualcomm/qca6595au firmware","qualcomm/qca6696 firmware","qualcomm/qca8337 firmware","qualcomm/qcm6125 firmware","qualcomm/qcs405 firmware","qualcomm/qcs410 firmware","qualcomm/qcs610 firmware","qualcomm/qcs6125 firmware","qualcomm/sa6145p firmware","qualcomm/sa6150p firmware","qualcomm/sa6155 firmware","qualcomm/sa6155p firmware","qualcomm/sa8145p firmware","qualcomm/sa8150p firmware","qualcomm/sa8155 firmware","qualcomm/sa8155p firmware","qualcomm/sa8195p firmware","qualcomm/sd 675 firmware","qualcomm/sd 8c firmware","qualcomm/sd 8cx firmware","qualcomm/sd665 firmware","qualcomm/sd675 firmware","qualcomm/sd678 firmware","qualcomm/sd720g firmware","qualcomm/sd855 firmware","qualcomm/sda429w firmware","qualcomm/sdx55 firmware","qualcomm/sdx55m firmware","qualcomm/sm6250 firmware","qualcomm/wcd9335 firmware","qualcomm/wcd9340 firmware","qualcomm/wcd9341 firmware","qualcomm/wcd9370 firmware","qualcomm/wcd9375 firmware","qualcomm/wcd9380 firmware","qualcomm/wcn3610 firmware","qualcomm/wcn3620 firmware","qualcomm/wcn3660b firmware","qualcomm/wcn3950 firmware","qualcomm/wcn3980 firmware","qualcomm/wcn3988 firmware","qualcomm/wcn3991 firmware","qualcomm/wcn3998 firmware","qualcomm/wcn3999 firmware"],"epss":{"score":0.00174,"percentile":0.06865,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.17%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"http://packetstormsecurity.com/files/172856/Qualcomm-NPU-Use-After-Free-Information-Leak.html","source":"product-security@qualcomm.com"},{"url":"https://www.qualcomm.com/company/product-security/bulletins/october-2021-bulletin","tags":["Patch","Vendor Advisory"],"source":"product-security@qualcomm.com"},{"url":"http://packetstormsecurity.com/files/172856/Qualcomm-NPU-Use-After-Free-Information-Leak.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.qualcomm.com/company/product-security/bulletins/october-2021-bulletin","tags":["Patch","Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2021-1968","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}