{"id":"CVE-2021-1961","aliases":["2817936","A-172378366","EUVD-2021-7425","GHSA-h3rv-9c6w-cv3x","PUB-A-172378366"],"status":"published","title":"Possible buffer overflow due to lack of offset length check while updating the buffer value in...","description":"Possible buffer overflow due to lack of offset length check while updating the buffer value in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wearables","severity":{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00385,"percentile":0.33009,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-120"],"published":"2021-09-01T00:00:00Z","modified":"2026-11-05T16:32:28Z","exploits":[{"source":"pocgithub","id":"tamirzb/CVE-2021-1961","title":"tamirzb/CVE-2021-1961","date":"2022-09-03","url":"https://github.com/tamirzb/CVE-2021-1961"}],"fixes":[{"ecosystem":"Android","package":":linux_kernel:Qualcomm","fixed_in":["SoCVersion:2021-09-05"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Android","package":":linux_kernel:Qualcomm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"SoCVersion:0"},{"fixed":"SoCVersion:2021-09-05"}]}],"versions":["SoCVersion"]}],"products":[{"vendor":"qualcomm","product":"apq8009_firmware"},{"vendor":"qualcomm","product":"apq8053_firmware"},{"vendor":"qualcomm","product":"apq8096au_firmware"},{"vendor":"qualcomm","product":"aqt1000_firmware"},{"vendor":"qualcomm","product":"ar8031_firmware"},{"vendor":"qualcomm","product":"ar8035_firmware"},{"vendor":"qualcomm","product":"csra6620_firmware"},{"vendor":"qualcomm","product":"csra6640_firmware"},{"vendor":"qualcomm","product":"fsm10055_firmware"},{"vendor":"qualcomm","product":"fsm10056_firmware"},{"vendor":"qualcomm","product":"mdm9150_firmware"},{"vendor":"qualcomm","product":"mdm9206_firmware"},{"vendor":"qualcomm","product":"mdm9640_firmware"},{"vendor":"qualcomm","product":"mdm9650_firmware"},{"vendor":"qualcomm","product":"msm8953_firmware"},{"vendor":"qualcomm","product":"msm8996au_firmware"},{"vendor":"qualcomm","product":"qca6174a_firmware"},{"vendor":"qualcomm","product":"qca6390_firmware"},{"vendor":"qualcomm","product":"qca6391_firmware"},{"vendor":"qualcomm","product":"qca6420_firmware"},{"vendor":"qualcomm","product":"qca6421_firmware"},{"vendor":"qualcomm","product":"qca6426_firmware"},{"vendor":"qualcomm","product":"qca6430_firmware"},{"vendor":"qualcomm","product":"qca6431_firmware"},{"vendor":"qualcomm","product":"qca6436_firmware"},{"vendor":"qualcomm","product":"qca6564a_firmware"},{"vendor":"qualcomm","product":"qca6564au_firmware"},{"vendor":"qualcomm","product":"qca6574_firmware"},{"vendor":"qualcomm","product":"qca6574a_firmware"},{"vendor":"qualcomm","product":"qca6574au_firmware"},{"vendor":"qualcomm","product":"qca6584au_firmware"},{"vendor":"qualcomm","product":"qca6595_firmware"},{"vendor":"qualcomm","product":"qca6595au_firmware"},{"vendor":"qualcomm","product":"qca6696_firmware"},{"vendor":"qualcomm","product":"qca8337_firmware"},{"vendor":"qualcomm","product":"qca9367_firmware"},{"vendor":"qualcomm","product":"qca9377_firmware"},{"vendor":"qualcomm","product":"qcm6125_firmware"},{"vendor":"qualcomm","product":"qcs405_firmware"},{"vendor":"qualcomm","product":"qcs410_firmware"},{"vendor":"qualcomm","product":"qcs605_firmware"},{"vendor":"qualcomm","product":"qcs610_firmware"},{"vendor":"qualcomm","product":"qcs6125_firmware"},{"vendor":"qualcomm","product":"qrb5165_firmware"},{"vendor":"qualcomm","product":"qsm8250_firmware"},{"vendor":"qualcomm","product":"qualcomm215_firmware"},{"vendor":"qualcomm","product":"sa6145p_firmware"},{"vendor":"qualcomm","product":"sa6150p_firmware"},{"vendor":"qualcomm","product":"sa6155_firmware"},{"vendor":"qualcomm","product":"sa6155p_firmware"},{"vendor":"qualcomm","product":"sa8145p_firmware"},{"vendor":"qualcomm","product":"sa8150p_firmware"},{"vendor":"qualcomm","product":"sa8155_firmware"},{"vendor":"qualcomm","product":"sa8155p_firmware"},{"vendor":"qualcomm","product":"sa8195p_firmware"},{"vendor":"qualcomm","product":"sd205_firmware"},{"vendor":"qualcomm","product":"sd210_firmware"},{"vendor":"qualcomm","product":"sd460_firmware"},{"vendor":"qualcomm","product":"sd480_firmware"},{"vendor":"qualcomm","product":"sd662_firmware"},{"vendor":"qualcomm","product":"sd665_firmware"},{"vendor":"qualcomm","product":"sd690_5g_firmware"},{"vendor":"qualcomm","product":"sd750g_firmware"},{"vendor":"qualcomm","product":"sd765_firmware"},{"vendor":"qualcomm","product":"sd765g_firmware"},{"vendor":"qualcomm","product":"sd768g_firmware"},{"vendor":"qualcomm","product":"sd778g_firmware"},{"vendor":"qualcomm","product":"sd780g_firmware"},{"vendor":"qualcomm","product":"sd855_firmware"},{"vendor":"qualcomm","product":"sd865_5g_firmware"},{"vendor":"qualcomm","product":"sd870_firmware"},{"vendor":"qualcomm","product":"sd888_5g_firmware"},{"vendor":"qualcomm","product":"sd_8c_firmware"},{"vendor":"qualcomm","product":"sd_8cx_firmware"},{"vendor":"qualcomm","product":"sda429w_firmware"},{"vendor":"qualcomm","product":"sdx12_firmware"},{"vendor":"qualcomm","product":"sdx55_firmware"},{"vendor":"qualcomm","product":"sdx55m_firmware"},{"vendor":"qualcomm","product":"sdxr2_5g_firmware"},{"vendor":"qualcomm","product":"sm7250_firmware"},{"vendor":"qualcomm","product":"sm7325_firmware"},{"vendor":"qualcomm","product":"wcd9326_firmware"},{"vendor":"qualcomm","product":"wcd9330_firmware"},{"vendor":"qualcomm","product":"wcd9335_firmware"},{"vendor":"qualcomm","product":"wcd9340_firmware"},{"vendor":"qualcomm","product":"wcd9341_firmware"},{"vendor":"qualcomm","product":"wcd9370_firmware"},{"vendor":"qualcomm","product":"wcd9375_firmware"},{"vendor":"qualcomm","product":"wcd9380_firmware"},{"vendor":"qualcomm","product":"wcd9385_firmware"},{"vendor":"qualcomm","product":"wcn3610_firmware"},{"vendor":"qualcomm","product":"wcn3615_firmware"},{"vendor":"qualcomm","product":"wcn3620_firmware"},{"vendor":"qualcomm","product":"wcn3660b_firmware"},{"vendor":"qualcomm","product":"wcn3680_firmware"},{"vendor":"qualcomm","product":"wcn3680b_firmware"},{"vendor":"qualcomm","product":"wcn3950_firmware"},{"vendor":"qualcomm","product":"wcn3980_firmware"},{"vendor":"qualcomm","product":"wcn3988_firmware"},{"vendor":"qualcomm","product":"wcn3990_firmware"},{"vendor":"qualcomm","product":"wcn3991_firmware"},{"vendor":"qualcomm","product":"wcn3998_firmware"},{"vendor":"qualcomm","product":"wcn3999_firmware"},{"vendor":"qualcomm","product":"wcn6740_firmware"},{"vendor":"qualcomm","product":"wcn6750_firmware"},{"vendor":"qualcomm","product":"wcn6850_firmware"},{"vendor":"qualcomm","product":"wcn6851_firmware"},{"vendor":"qualcomm","product":"wcn6855_firmware"},{"vendor":"qualcomm","product":"wcn6856_firmware"},{"vendor":"qualcomm","product":"wsa8810_firmware"},{"vendor":"qualcomm","product":"wsa8815_firmware"},{"vendor":"qualcomm","product":"wsa8830_firmware"},{"vendor":"qualcomm","product":"wsa8835_firmware"},{"vendor":"qualcomm, inc.","product":"snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice \u0026 music, snapdragon wearables"}],"references":[{"url":"https://www.qualcomm.com/company/product-security/bulletins/september-2021-bulletin","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-1961"},{"url":"https://github.com/advisories/GHSA-h3rv-9c6w-cv3x"},{"url":"https://source.android.com/security/bulletin/2021-09-01","tags":["advisory"]},{"url":"https://source.codeaurora.org/quic/le/kernel/msm-4.19/commit/?id=edc0db63de9a0a7375bf05fafda3d47b558fd9ff","tags":["fix"]}],"sources":{"cve":[{"id":"CVE-2021-1961","description":"Possible buffer overflow due to lack of offset length check while updating the buffer value in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wearables","status":"published","published":"2021-09-09T07:36:00Z","modified":"2024-08-03T16:25:06.365Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"cna"}],"updated_at":"2026-11-02T14:33:08.409321Z"}],"euvd":[{"id":"EUVD-2021-7425","description":"Possible buffer overflow due to lack of offset length check while updating the buffer value in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wearables","status":"published","published":"2021-09-09T07:36:00Z","modified":"2024-08-03T16:25:06Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-03T03:25:14.091701Z"}],"ghsa":[{"id":"GHSA-h3rv-9c6w-cv3x","title":"Possible buffer overflow due to lack of offset length check while updating the buffer value in...","description":"Possible buffer overflow due to lack of offset length check while updating the buffer value in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wearables","status":"published","published":"2022-05-24T19:14:04Z","modified":"2023-01-30T05:02:09Z","cwes":["CWE-120"],"updated_at":"2026-11-02T14:46:34.725436Z"}],"nvd":[{"id":"CVE-2021-1961","description":"Possible buffer overflow due to lack of offset length check while updating the buffer value in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wearables","status":"published","published":"2021-09-09T08:15:25.65Z","modified":"2026-06-17T03:33:02.07Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:06:58.502206Z"}],"osv":[{"id":"PUB-A-172378366","status":"published","published":"2021-09-01T00:00:00Z","modified":"2026-11-10T17:02:23.040266809Z","updated_at":"2026-11-09T17:05:18.698671Z"}]}}