[ CVE-2021-1906 · Published 7 May 2021 ]
Qualcomm Multiple Chipsets Detection of Error Condition Without Action Vulnerability
Exploited · CISA KEV CVSS 5.5
EPSS <1%Fix available
[ Why it matters ]Priority signals
- Exploited in the wild: on CISA's Known Exploited Vulnerabilities list since 2021-11-03
[ Description ]Official description
Improper handling of address deregistration on failure can lead to new GPU address allocation failure. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CISA: Multiple Qualcomm chipsets contain a detection of error condition without action vulnerability when improper handling of address deregistration on failure can lead to new GPU address allocation failure.
[ Fixes ]Fixes and patches
CISA required action (US federal deadline 17 Nov 2021): Apply updates per vendor instructions.
- Patch on qualcomm.comVendor patch or bulletin · NVD · Reference tagged 'Patch' by NVD
[ References ]References
- www.qualcomm.com/company/product-security/bulletins/may-2021-bulletinPatchVendor Advisory
- www.cisa.gov/known-exploited-vulnerabilities-catalogUS Government Resource