CVE-2021-1957: Medium severity Qualcomm Apq8017 Firmware vulnerability
Improper Access Control when ACL link encryption is failed and ACL link is not disconnected during reconnection with paired device in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/platform/system/btto a version that resolves this vulnerability.Fixed in SoCVersion:2021-09-05 - Upgrade
Upgrade
android/platform/vendor/qcom-opensource/system/btto a version that resolves this vulnerability.Fixed in SoCVersion:2021-09-05
Event History
Frequently Asked Questions
What is the severity of CVE-2021-1957?
CVE-2021-1957 has been categorized as a high severity vulnerability due to improper access control in affected Qualcomm devices.
How do I fix CVE-2021-1957?
To remediate CVE-2021-1957, it is recommended to update the firmware of affected Qualcomm devices to the latest version provided by Qualcomm.
Which devices are affected by CVE-2021-1957?
CVE-2021-1957 impacts various Qualcomm devices, including those in the Snapdragon Auto, Compute, Connectivity, and Mobile lineups.
What causes CVE-2021-1957 vulnerability?
CVE-2021-1957 arises from improper access control when ACL (Access Control List) link encryption fails and the link is not properly disconnected during reconnection.
Is there a workaround for CVE-2021-1957?
Currently, there is no official workaround for CVE-2021-1957, so it is crucial to apply firmware updates as soon as they are available.