CVE-2021-1905 — VulnIntel

CVE-2021-1905

HIGH

KEV

Possible use after free due to improper handling of memory mapping of multiple processes simultaneously. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

StatusAnalyzed

설명

Score Summary

CVSS Score: 8.4
Version: 3.1
VPI: 100
Why this VPI (explainable, experimental)
VPI breakdown
Impact 84.00
Exploitation signal(KEV listed) ×1.50
VPI 100.00
VPI formula vpi-v1
EPSS: 1.1%
(상위 63.4%)
Attack Vector: Local Access
Low Complexity
No Privileges
No User Interaction
Scope Unchanged
High Confidentiality Impact
High Integrity Impact
High Availability Impact

Details

Published: 05/07/2021(5 years ago)
Modified: 10/28/2025(9 months ago)
Source: KEV, NVD
Products: 792

CISA KEV Listing

Vendor / Project: Qualcomm
Product: Multiple Chipsets

Date Added: 11/03/2021
Due Date: 05/03/2022Overdue 1541d

Required Action

Apply updates per vendor instructions.

Vulnerability Lifecycle

NVDPublished05/07/2021
CISA KEVKEV Listed11/03/2021
CISA KEV

Score Comparison by Source

Source	CVSS Version	Base Score	Severity	Vector String	Assessment Date
NVDNIST	3.1	8.4	HIGH	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	04/20/2026
NVDNIST	2.0	7.2

CWE Weakness Classification

CWE-416
NVD
Secondary

References (2)

Affected Products (792)

Impact	84.00
Exploitation signal(KEV listed)	×1.50
VPI	100.00