CVE-2021-1901: Medium severity Qualcomm Apq8009 Firmware vulnerability
Possible buffer over-read due to lack of length check while flashing meta images in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/kernel/lkto a version that resolves this vulnerability.Fixed in SoCVersion:2021-07-05
Event History
Frequently Asked Questions
What is the severity of CVE-2021-1901?
CVE-2021-1901 is considered a medium severity vulnerability due to the potential for a buffer over-read that may affect system integrity.
How do I fix CVE-2021-1901?
To fix CVE-2021-1901, ensure that you update your firmware to the latest version provided by Qualcomm that addresses this vulnerability.
What are the affected devices for CVE-2021-1901?
CVE-2021-1901 affects multiple Qualcomm chipsets including APQ8009, APQ8053, and others as listed in the detailed vendor advisory.
What type of vulnerability is CVE-2021-1901?
CVE-2021-1901 is categorized as a buffer over-read vulnerability related to the handling of meta images.
Can CVE-2021-1901 be exploited remotely?
Exploitation of CVE-2021-1901 could potentially allow an attacker to read sensitive memory contents, depending on the specific environment and attack vector.