{"id":"CVE-2021-1981","url":"https://www.cyber-defence.io/tools/cve/CVE-2021-1981","generatedAt":"2026-10-27T23:36:19.526Z","title":"Possible buffer over read due to improper IE size check of Bearer capability IE in MT setup request from network in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile","description":"Possible buffer over read due to improper IE size check of Bearer capability IE in MT setup request from network in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile","published":"2021-11-12T07:15:07.000Z","lastModified":"2026-06-17T03:33:07.000Z","status":"Modified","sourceIdentifier":"product-security@qualcomm.com","cvss":{"version":"3.1","score":9.1,"severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H"},"cwe":["CWE-125"],"affected":["qualcomm/apq8017 firmware","qualcomm/ar8035 firmware","qualcomm/msm8917 firmware","qualcomm/qca6390 firmware","qualcomm/qca6391 firmware","qualcomm/qca6421 firmware","qualcomm/qca6426 firmware","qualcomm/qca6431 firmware","qualcomm/qca6436 firmware","qualcomm/qca6574a firmware","qualcomm/qca6574au firmware","qualcomm/qca6595au firmware","qualcomm/qca6696 firmware","qualcomm/qca8081 firmware","qualcomm/qca8337 firmware","qualcomm/qcm6125 firmware","qualcomm/qcm6490 firmware","qualcomm/qcs410 firmware","qualcomm/qcs610 firmware","qualcomm/qcs6125 firmware","qualcomm/qcs6490 firmware","qualcomm/qcx315 firmware","qualcomm/qsm8350 firmware","qualcomm/qualcomm215 firmware","qualcomm/sa515m firmware","qualcomm/sd 675 firmware","qualcomm/sd205 firmware","qualcomm/sd210 firmware","qualcomm/sd429 firmware","qualcomm/sd439 firmware","qualcomm/sd480 firmware","qualcomm/sd665 firmware","qualcomm/sd670 firmware","qualcomm/sd675 firmware","qualcomm/sd678 firmware","qualcomm/sd690 5g firmware","qualcomm/sd720g firmware","qualcomm/sd730 firmware","qualcomm/sd750g firmware","qualcomm/sd765 firmware","qualcomm/sd765g firmware","qualcomm/sd768g firmware","qualcomm/sd778g firmware","qualcomm/sd845 firmware","qualcomm/sd855 firmware","qualcomm/sd865 5g firmware","qualcomm/sd870 firmware","qualcomm/sd888 5g firmware","qualcomm/sdx55 firmware","qualcomm/sdx55m firmware","qualcomm/sdx65 firmware","qualcomm/sdxr2 5g firmware","qualcomm/sm6250 firmware","qualcomm/sm6250p firmware","qualcomm/sm6375 firmware","qualcomm/sm7250 firmware","qualcomm/sm7325 firmware","qualcomm/sm8450 firmware","qualcomm/sm8450p firmware","qualcomm/wcd9326 firmware"],"epss":{"score":0.00611,"percentile":0.48986,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (0.61%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"https://www.qualcomm.com/company/product-security/bulletins/november-2021-bulletin","tags":["Vendor Advisory"],"source":"product-security@qualcomm.com"},{"url":"https://www.qualcomm.com/company/product-security/bulletins/november-2021-bulletin","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2021-1981","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}