CVE-2021-1918: Medium severity Google Android vulnerability
Published Dec 6, 2021
·Updated
Improper handling of resource allocation in virtual machines can lead to information exposure in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
Affected Software
121 affected components
Google Android
Qualcomm Qca6391 Firmware
Qualcomm Qca6391
Qualcomm Qcm6490 Firmware
Qualcomm Qcm6490
Qualcomm Qcs6490 Firmware
Qualcomm Qcs6490
Qualcomm Qrb5165 Firmware
Qualcomm Qrb5165
Qualcomm Qrb5165n Firmware
Qualcomm Qrb5165n
Qualcomm Sd690 5g Firmware
Qualcomm Sd690 5g
Qualcomm Sd750g Firmware
Qualcomm Sd750g
Qualcomm Sd765 Firmware
Qualcomm Sd765
Qualcomm Sd765g Firmware
Qualcomm Sd765g
Qualcomm Sd768g Firmware
Qualcomm Sd768g
Qualcomm Sd778g Firmware
Qualcomm Sd778g
Qualcomm Sd888 5g Firmware
Qualcomm Sd888 5g
Qualcomm Sm7250p Firmware
Qualcomm Sm7250p
Qualcomm Sm7325p Firmware
Qualcomm Sm7325p
Qualcomm Wcd9370 Firmware
Qualcomm Wcd9370
Qualcomm Wcd9375 Firmware
Qualcomm Wcd9375
Qualcomm Wcd9380 Firmware
Qualcomm Wcd9380
Qualcomm Wcd9385 Firmware
Qualcomm Wcd9385
Qualcomm Wcn3988 Firmware
Qualcomm Wcn3988
Qualcomm Wcn3991 Firmware
Qualcomm Wcn3991
Qualcomm Wcn3998 Firmware
Qualcomm Wcn3998
Qualcomm Wcn6750 Firmware
Qualcomm Wcn6750
Qualcomm Wcn6850 Firmware
Qualcomm Wcn6850
Qualcomm Wcn6851 Firmware
Qualcomm Wcn6851
Qualcomm Wcn6855 Firmware
Qualcomm WCN6855
Qualcomm Wcn6856 Firmware
Qualcomm Wcn6856
Qualcomm Wsa8810 Firmware
Qualcomm Wsa8810
Qualcomm Wsa8815 Firmware
Qualcomm Wsa8815
Qualcomm Wsa8830 Firmware
Qualcomm Wsa8830
Qualcomm Wsa8835 Firmware
Qualcomm Wsa8835
All of the following
Qualcomm Qca6391 Firmware
Qualcomm Qca6391
All of the following
Qualcomm Qcm6490 Firmware
Qualcomm Qcm6490
All of the following
Qualcomm Qcs6490 Firmware
Qualcomm Qcs6490
All of the following
Qualcomm Qrb5165 Firmware
Qualcomm Qrb5165
All of the following
Qualcomm Qrb5165n Firmware
Qualcomm Qrb5165n
All of the following
Qualcomm Sd690 5g Firmware
Qualcomm Sd690 5g
All of the following
Qualcomm Sd750g Firmware
Qualcomm Sd750g
All of the following
Qualcomm Sd765 Firmware
Qualcomm Sd765
All of the following
Qualcomm Sd765g Firmware
Qualcomm Sd765g
All of the following
Qualcomm Sd768g Firmware
Qualcomm Sd768g
All of the following
Qualcomm Sd778g Firmware
Qualcomm Sd778g
All of the following
Qualcomm Sd888 5g Firmware
Qualcomm Sd888 5g
All of the following
Qualcomm Sm7250p Firmware
Qualcomm Sm7250p
All of the following
Qualcomm Sm7325p Firmware
Qualcomm Sm7325p
All of the following
Qualcomm Wcd9370 Firmware
Qualcomm Wcd9370
All of the following
Qualcomm Wcd9375 Firmware
Qualcomm Wcd9375
All of the following
Qualcomm Wcd9380 Firmware
Qualcomm Wcd9380
All of the following
Qualcomm Wcd9385 Firmware
Qualcomm Wcd9385
All of the following
Qualcomm Wcn3988 Firmware
Qualcomm Wcn3988
All of the following
Qualcomm Wcn3991 Firmware
Qualcomm Wcn3991
All of the following
Qualcomm Wcn3998 Firmware
Qualcomm Wcn3998
All of the following
Qualcomm Wcn6750 Firmware
Qualcomm Wcn6750
All of the following
Qualcomm Wcn6850 Firmware
Qualcomm Wcn6850
All of the following
Qualcomm Wcn6851 Firmware
Qualcomm Wcn6851
All of the following
Qualcomm Wcn6855 Firmware
Qualcomm WCN6855
All of the following
Qualcomm Wcn6856 Firmware
Qualcomm Wcn6856
All of the following
Qualcomm Wsa8810 Firmware
Qualcomm Wsa8810
All of the following
Qualcomm Wsa8815 Firmware
Qualcomm Wsa8815
All of the following
Qualcomm Wsa8830 Firmware
Qualcomm Wsa8830
All of the following
Qualcomm Wsa8835 Firmware
Qualcomm Wsa8835
Event History
Dec 6, 2021
CVE Published
via Android·12:00 AM
Data Sourced
via Android·12:00 AM
SeverityAffected Software
Jan 3, 2022
CVE Published
via MITRE·07:25 AM
Data Sourced
via MITRE·07:25 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2021-1918?
CVE-2021-1918 is rated as a high severity vulnerability due to improper handling of resource allocation in virtual machines.
2
How do I fix CVE-2021-1918?
To fix CVE-2021-1918, ensure that your device firmware is updated to the latest version provided by the manufacturer.
3
What types of devices are affected by CVE-2021-1918?
CVE-2021-1918 affects various Qualcomm devices including Snapdragon Consumer IOT, Snapdragon Industrial IOT, and Snapdragon Mobile devices.
4
What could be the impact of exploiting CVE-2021-1918?
Exploitation of CVE-2021-1918 can lead to information exposure, potentially compromising sensitive user data.
5
Is CVE-2021-1918 specific to any operating system?
CVE-2021-1918 primarily affects devices running Qualcomm firmware, including those operating on the Android platform.