{"id":"CVE-2021-1947","aliases":["2840102","A-187074483","ASB-A-187074483","EUVD-2021-7411","GHSA-7q63-mgr2-2p5j"],"status":"published","title":"Use-after-free vulnerability in kernel graphics driver because of storing an invalid pointer in...","description":"Use-after-free vulnerability in kernel graphics driver because of storing an invalid pointer in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking","severity":{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.0016,"percentile":0.05156,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-416"],"published":"2021-08-01T00:00:00Z","modified":"2026-11-05T16:32:28Z","fixes":[{"ecosystem":"Android","package":":linux_kernel:Qualcomm","fixed_in":["SoCVersion:2021-08-05"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Android","package":":linux_kernel:Qualcomm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"SoCVersion:0"},{"fixed":"SoCVersion:2021-08-05"}]}],"versions":["SoCVersion"]}],"products":[{"vendor":"qualcomm","product":"apq8009w_firmware"},{"vendor":"qualcomm","product":"apq8053_firmware"},{"vendor":"qualcomm","product":"ar9380_firmware"},{"vendor":"qualcomm","product":"ipq8064_firmware"},{"vendor":"qualcomm","product":"ipq8065_firmware"},{"vendor":"qualcomm","product":"ipq8068_firmware"},{"vendor":"qualcomm","product":"ipq8069_firmware"},{"vendor":"qualcomm","product":"msm8909w_firmware"},{"vendor":"qualcomm","product":"msm8953_firmware"},{"vendor":"qualcomm","product":"qca6320_firmware"},{"vendor":"qualcomm","product":"qca6390_firmware"},{"vendor":"qualcomm","product":"qca6391_firmware"},{"vendor":"qualcomm","product":"qca6426_firmware"},{"vendor":"qualcomm","product":"qca8337_firmware"},{"vendor":"qualcomm","product":"qca9531_firmware"},{"vendor":"qualcomm","product":"qca9558_firmware"},{"vendor":"qualcomm","product":"qca9561_firmware"},{"vendor":"qualcomm","product":"qca9563_firmware"},{"vendor":"qualcomm","product":"qca9880_firmware"},{"vendor":"qualcomm","product":"qca9882_firmware"},{"vendor":"qualcomm","product":"qca9886_firmware"},{"vendor":"qualcomm","product":"qca9887_firmware"},{"vendor":"qualcomm","product":"qca9888_firmware"},{"vendor":"qualcomm","product":"qca9889_firmware"},{"vendor":"qualcomm","product":"qca9896_firmware"},{"vendor":"qualcomm","product":"qca9898_firmware"},{"vendor":"qualcomm","product":"qca9980_firmware"},{"vendor":"qualcomm","product":"qca9982_firmware"},{"vendor":"qualcomm","product":"qca9984_firmware"},{"vendor":"qualcomm","product":"qca9990_firmware"},{"vendor":"qualcomm","product":"qca9992_firmware"},{"vendor":"qualcomm","product":"qca9994_firmware"},{"vendor":"qualcomm","product":"qcm2290_firmware"},{"vendor":"qualcomm","product":"qcm4290_firmware"},{"vendor":"qualcomm","product":"qcm6125_firmware"},{"vendor":"qualcomm","product":"qcs2290_firmware"},{"vendor":"qualcomm","product":"qcs4290_firmware"},{"vendor":"qualcomm","product":"qcs6125_firmware"},{"vendor":"qualcomm","product":"qet4101_firmware"},{"vendor":"qualcomm","product":"qrb5165_firmware"},{"vendor":"qualcomm","product":"qsw8573_firmware"},{"vendor":"qualcomm","product":"sd429_firmware"},{"vendor":"qualcomm","product":"sd460_firmware"},{"vendor":"qualcomm","product":"sd660_firmware"},{"vendor":"qualcomm","product":"sd662_firmware"},{"vendor":"qualcomm","product":"sd665_firmware"},{"vendor":"qualcomm","product":"sd690_5g_firmware"},{"vendor":"qualcomm","product":"sd750g_firmware"},{"vendor":"qualcomm","product":"sd765_firmware"},{"vendor":"qualcomm","product":"sd765g_firmware"},{"vendor":"qualcomm","product":"sd768g_firmware"},{"vendor":"qualcomm","product":"sd855_firmware"},{"vendor":"qualcomm","product":"sd865_5g_firmware"},{"vendor":"qualcomm","product":"sd870_firmware"},{"vendor":"qualcomm","product":"sda429w_firmware"},{"vendor":"qualcomm","product":"sdm429w_firmware"},{"vendor":"qualcomm","product":"sdm830_firmware"},{"vendor":"qualcomm","product":"sdx55_firmware"},{"vendor":"qualcomm","product":"sdx55m_firmware"},{"vendor":"qualcomm","product":"sm4125_firmware"},{"vendor":"qualcomm","product":"sm7250_firmware"},{"vendor":"qualcomm","product":"wcd9326_firmware"},{"vendor":"qualcomm","product":"wcd9335_firmware"},{"vendor":"qualcomm","product":"wcd9340_firmware"},{"vendor":"qualcomm","product":"wcd9341_firmware"},{"vendor":"qualcomm","product":"wcd9370_firmware"},{"vendor":"qualcomm","product":"wcd9375_firmware"},{"vendor":"qualcomm","product":"wcd9380_firmware"},{"vendor":"qualcomm","product":"wcd9385_firmware"},{"vendor":"qualcomm","product":"wcn3610_firmware"},{"vendor":"qualcomm","product":"wcn3615_firmware"},{"vendor":"qualcomm","product":"wcn3620_firmware"},{"vendor":"qualcomm","product":"wcn3660b_firmware"},{"vendor":"qualcomm","product":"wcn3680b_firmware"},{"vendor":"qualcomm","product":"wcn3910_firmware"},{"vendor":"qualcomm","product":"wcn3950_firmware"},{"vendor":"qualcomm","product":"wcn3980_firmware"},{"vendor":"qualcomm","product":"wcn3988_firmware"},{"vendor":"qualcomm","product":"wcn3990_firmware"},{"vendor":"qualcomm","product":"wcn3991_firmware"},{"vendor":"qualcomm","product":"wcn3998_firmware"},{"vendor":"qualcomm","product":"wcn6850_firmware"},{"vendor":"qualcomm","product":"wcn6851_firmware"},{"vendor":"qualcomm","product":"wsa8810_firmware"},{"vendor":"qualcomm","product":"wsa8815_firmware"},{"vendor":"qualcomm","product":"wsa8830_firmware"},{"vendor":"qualcomm","product":"wsa8835_firmware"},{"vendor":"qualcomm, inc.","product":"snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, snapdragon wired infrastructure and networking"}],"references":[{"url":"https://www.qualcomm.com/company/product-security/bulletins/august-2021-bulletin","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-1947"},{"url":"https://github.com/advisories/GHSA-7q63-mgr2-2p5j"},{"url":"https://source.android.com/security/bulletin/2021-08-01","tags":["advisory"]},{"url":"https://source.codeaurora.org/quic/le/kernel/msm-4.19/commit/?id=cb82ed90520b6801e6b0ec6bac6821cd347e3de7","tags":["fix"]},{"url":"https://source.codeaurora.org/quic/le/kernel/msm-4.19/commit/?id=70c13b73f1ea7a30a730ced48a59d366898677bc","tags":["fix"]},{"url":"https://source.codeaurora.org/quic/le/kernel/msm-4.19/commit/?id=a637a43b7995cf905f1d0d059b418ee57e60aa67","tags":["fix"]},{"url":"https://source.codeaurora.org/quic/le/kernel/msm-4.19/commit/?id=851a03f61d90566e37408240b2f71ed34f8cc73a","tags":["fix"]}],"sources":{"cve":[{"id":"CVE-2021-1947","description":"Use-after-free vulnerability in kernel graphics driver because of storing an invalid pointer in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking","status":"published","published":"2021-09-17T07:05:22Z","modified":"2024-08-03T16:25:06.243Z","cvss":[{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"updated_at":"2026-11-02T14:33:08.045407Z"}],"euvd":[{"id":"EUVD-2021-7411","description":"Use-after-free vulnerability in kernel graphics driver because of storing an invalid pointer in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking","status":"published","published":"2021-09-17T07:05:22Z","modified":"2024-08-03T16:25:06Z","cvss":[{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T03:25:14.091701Z"}],"ghsa":[{"id":"GHSA-7q63-mgr2-2p5j","title":"Use-after-free vulnerability in kernel graphics driver because of storing an invalid pointer in...","description":"Use-after-free vulnerability in kernel graphics driver because of storing an invalid pointer in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking","status":"published","published":"2022-05-24T19:14:58Z","modified":"2023-01-30T05:02:16Z","cwes":["CWE-416"],"updated_at":"2026-11-02T14:46:36.123786Z"}],"nvd":[{"id":"CVE-2021-1947","description":"Use-after-free vulnerability in kernel graphics driver because of storing an invalid pointer in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking","status":"published","published":"2021-09-17T07:15:08.92Z","modified":"2026-06-17T03:32:58.83Z","cvss":[{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:06:58.933037Z"}],"osv":[{"id":"ASB-A-187074483","status":"published","published":"2021-08-01T00:00:00Z","modified":"2026-11-10T17:02:23.040266809Z","updated_at":"2026-11-09T17:04:22.742827Z"}]}}