CVE-2021-1892
Memory corruption due to improper input validation while processing IO control which is...
Memory corruption due to improper input validation while processing IO control which is nonstandard in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Wired Infrastructure and Networking
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Memory corruption due to improper input validation while processing IO control which is nonstandard in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Wired Infrastructure and Networking
- Record
CVE-2021-1892- CVSS 3.1
- 8.4 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
EUVDEUVD-2021-7356
Memory corruption due to improper input validation while processing IO control which is nonstandard in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Wired Infrastructure and Networking
- Record
EUVD-2021-7356- CVSS 3.1
- 8.4 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jvc4-r4vc-q9p5
Memory corruption due to improper input validation while processing IO control which is...
Memory corruption due to improper input validation while processing IO control which is nonstandard in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Wired Infrastructure and Networking
- Record
GHSA-jvc4-r4vc-q9p5- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-20
- Updated
- 2026-11-02
NVD
Memory corruption due to improper input validation while processing IO control which is nonstandard in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Wired Infrastructure and Networking
- Record
CVE-2021-1892- CVSS 3.1
- 8.4 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-787
- Updated
- 2026-11-02
Affected products
- qualcomm, inc. snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon wired infrastructure and networking
- qualcomm aqt1000 firmware
- qualcomm pm8005 firmware
- qualcomm pm855 firmware
- qualcomm pm855p firmware
- qualcomm pm8998 firmware
- qualcomm pmi8998 firmware
- qualcomm qat3550 firmware
- qualcomm qca1062 firmware
- qualcomm qca1064 firmware
- qualcomm qca2066 firmware
- qualcomm qca6164 firmware
Show 43 moreShow less
- qualcomm qca6174 firmware
- qualcomm qca6174a firmware
- qualcomm qca6310 firmware
- qualcomm qca6335 firmware
- qualcomm qca6391 firmware
- qualcomm qca6420 firmware
- qualcomm qca6430 firmware
- qualcomm qca6595au firmware
- qualcomm qca9377 firmware
- qualcomm qcn7605 firmware
- qualcomm qcn7606 firmware
- qualcomm qet4100 firmware
- qualcomm qfe2081fc firmware
- qualcomm qfe2082fc firmware
- qualcomm qfe3100 firmware
- qualcomm qfe3440fc firmware
- qualcomm qfe4455fc firmware
- qualcomm qln1035bd firmware
- qualcomm sd835 firmware
- qualcomm sd845 firmware
- qualcomm sd850 firmware
- qualcomm sd8c firmware
- qualcomm sd8cx firmware
- qualcomm sdr8150 firmware
- qualcomm smb1350 firmware
- qualcomm smb1351 firmware
- qualcomm smb1380 firmware
- qualcomm smb1381 firmware
- qualcomm smb1390 firmware
- qualcomm smb2351 firmware
- qualcomm wcd9335 firmware
- qualcomm wcd9340 firmware
- qualcomm wcd9341 firmware
- qualcomm wcn3990 firmware
- qualcomm wcn3998 firmware
- qualcomm wcn6850 firmware
- qualcomm wcn6851 firmware
- qualcomm wcn6855 firmware
- qualcomm wcn6856 firmware
- qualcomm wgr7640 firmware
- qualcomm wsa8810 firmware
- qualcomm wsa8815 firmware
- qualcomm wtr5975 firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2021-1892 is a high vulnerability (CVSS 8.4) in Qualcomm, Inc. Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Wired Infrastructure And Networking, published April 7, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.17%, the 6th percentile. No source names a fixed version.