CVE-2021-1899: Medium severity qualcomm pq8009 firmware vulnerability
Possible buffer over read due to lack of length check while flashing meta images in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2021-1899?
CVE-2021-1899 is classified as a high-severity vulnerability due to potential impacts from buffer over-read.
How do I fix CVE-2021-1899?
To address CVE-2021-1899, update the firmware of affected Qualcomm devices to the latest version provided by the vendor.
What devices are affected by CVE-2021-1899?
CVE-2021-1899 affects various Qualcomm firmware versions across Snapdragon Consumer IOT and Mobile devices.
What is a buffer over-read in the context of CVE-2021-1899?
In CVE-2021-1899, a buffer over-read occurs when memory read operations exceed the allocated buffer size, possibly exposing sensitive data.
Can CVE-2021-1899 be exploited remotely?
Yes, CVE-2021-1899 could potentially be exploited remotely due to its nature in the firmware flashing process.