Vulnerability Name:

CVE-2021-1932 (CCN-211870)

Assigned:2020-12-08
Published:2021-10-04
Updated:2022-07-12
Summary:Improper access control in trusted application environment can cause unauthorized access to CDSP or ADSP VM memory with either privilege in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking
CVSS v3 Severity:8.4 High (CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
7.3 High (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Local
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): High
Integrity (I): High
Availibility (A): High
8.4 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
7.3 High (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Local
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): High
Integrity (I): High
Availibility (A): High
CVSS v2 Severity:7.2 High (CVSS v2 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): Complete
Integrity (I): Complete
Availibility (A): Complete
7.2 High (CCN CVSS v2 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): Complete
Integrity (I): Complete
Availibility (A): Complete
Vulnerability Type:CWE-Other
Vulnerability Consequences:Gain Privileges
References:Source: MITRE
Type: CNA
CVE-2021-1932

Source: XF
Type: UNKNOWN
qualcomm-cve20211932-priv-esc(211870)

Source: CCN
Type: Qualcomm Web site
October 2021 Security Bulletin

Source: CONFIRM
Type: Vendor Advisory
https://www.qualcomm.com/company/product-security/bulletins/october-2021-bulletin

Vulnerable Configuration:Configuration 1:
  • cpe:/o:qualcomm:aqt1000_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:aqt1000:-:*:*:*:*:*:*:*

    • Configuration 2:
  • cpe:/o:qualcomm:ar8035_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:ar8035:-:*:*:*:*:*:*:*

    • Configuration 3:
  • cpe:/o:qualcomm:qca6390_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qca6390:-:*:*:*:*:*:*:*

    • Configuration 4:
  • cpe:/o:qualcomm:qca6420_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qca6420:-:*:*:*:*:*:*:*

    • Configuration 5:
  • cpe:/o:qualcomm:qca6430_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qca6430:-:*:*:*:*:*:*:*

    • Configuration 6:
  • cpe:/o:qualcomm:qca6574a_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qca6574a:-:*:*:*:*:*:*:*

    • Configuration 7:
  • cpe:/o:qualcomm:qca6574au_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qca6574au:-:*:*:*:*:*:*:*

    • Configuration 8:
  • cpe:/o:qualcomm:qca6595_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qca6595:-:*:*:*:*:*:*:*

    • Configuration 9:
  • cpe:/o:qualcomm:qca6595au_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qca6595au:-:*:*:*:*:*:*:*

    • Configuration 10:
  • cpe:/o:qualcomm:qca6696_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qca6696:-:*:*:*:*:*:*:*

    • Configuration 11:
  • cpe:/o:qualcomm:qca9984_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qca9984:-:*:*:*:*:*:*:*

    • Configuration 12:
  • cpe:/o:qualcomm:qcm2290_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qcm2290:-:*:*:*:*:*:*:*

    • Configuration 13:
  • cpe:/o:qualcomm:qcm4290_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qcm4290:-:*:*:*:*:*:*:*

    • Configuration 14:
  • cpe:/o:qualcomm:qcs2290_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qcs2290:-:*:*:*:*:*:*:*

    • Configuration 15:
  • cpe:/o:qualcomm:qcs405_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qcs405:-:*:*:*:*:*:*:*

    • Configuration 16:
  • cpe:/o:qualcomm:qcs410_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qcs410:-:*:*:*:*:*:*:*

    • Configuration 17:
  • cpe:/o:qualcomm:qcs4290_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qcs4290:-:*:*:*:*:*:*:*

    • Configuration 18:
  • cpe:/o:qualcomm:qcs610_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qcs610:-:*:*:*:*:*:*:*

    • Configuration 19:
  • cpe:/o:qualcomm:sa6155p_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sa6155p:-:*:*:*:*:*:*:*

    • Configuration 20:
  • cpe:/o:qualcomm:sa8150p_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sa8150p:-:*:*:*:*:*:*:*

    • Configuration 21:
  • cpe:/o:qualcomm:sa8155_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sa8155:-:*:*:*:*:*:*:*

    • Configuration 22:
  • cpe:/o:qualcomm:sa8155p_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sa8155p:-:*:*:*:*:*:*:*

    • Configuration 23:
  • cpe:/o:qualcomm:sa8195p_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sa8195p:-:*:*:*:*:*:*:*

    • Configuration 24:
  • cpe:/o:qualcomm:sd_675_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sd_675:-:*:*:*:*:*:*:*

    • Configuration 25:
  • cpe:/o:qualcomm:sd_8c_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sd_8c:-:*:*:*:*:*:*:*

    • Configuration 26:
  • cpe:/o:qualcomm:sd_8cx_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sd_8cx:-:*:*:*:*:*:*:*

    • Configuration 27:
  • cpe:/o:qualcomm:sd460_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sd460:-:*:*:*:*:*:*:*

    • Configuration 28:
  • cpe:/o:qualcomm:sd480_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sd480:-:*:*:*:*:*:*:*

    • Configuration 29:
  • cpe:/o:qualcomm:sd662_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sd662:-:*:*:*:*:*:*:*

    • Configuration 30:
  • cpe:/o:qualcomm:sd675_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sd675:-:*:*:*:*:*:*:*

    • Configuration 31:
  • cpe:/o:qualcomm:sd678_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sd678:-:*:*:*:*:*:*:*

    • Configuration 32:
  • cpe:/o:qualcomm:sd720g_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sd720g:-:*:*:*:*:*:*:*

    • Configuration 33:
  • cpe:/o:qualcomm:sd730_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sd730:-:*:*:*:*:*:*:*

    • Configuration 34:
  • cpe:/o:qualcomm:sd7c_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sd7c:-:*:*:*:*:*:*:*

    • Configuration 35:
  • cpe:/o:qualcomm:sd855_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sd855:-:*:*:*:*:*:*:*

    • Configuration 36:
  • cpe:/o:qualcomm:sd888_5g_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sd888_5g:-:*:*:*:*:*:*:*

    • Configuration 37:
  • cpe:/o:qualcomm:sdm830_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sdm830:-:*:*:*:*:*:*:*

    • Configuration 38:
  • cpe:/o:qualcomm:sdx24_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sdx24:-:*:*:*:*:*:*:*

    • Configuration 39:
  • cpe:/o:qualcomm:sdx50m_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sdx50m:-:*:*:*:*:*:*:*

    • Configuration 40:
  • cpe:/o:qualcomm:sdx55_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sdx55:-:*:*:*:*:*:*:*

    • Configuration 41:
  • cpe:/o:qualcomm:sdx55m_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sdx55m:-:*:*:*:*:*:*:*

    • Configuration 42:
  • cpe:/o:qualcomm:sm4125_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sm4125:-:*:*:*:*:*:*:*

    • Configuration 43:
  • cpe:/o:qualcomm:sm6250_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sm6250:-:*:*:*:*:*:*:*

    • Configuration 44:
  • cpe:/o:qualcomm:sm6250p_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sm6250p:-:*:*:*:*:*:*:*

    • Configuration 45:
  • cpe:/o:qualcomm:wcd9340_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wcd9340:-:*:*:*:*:*:*:*

    • Configuration 46:
  • cpe:/o:qualcomm:wcd9341_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wcd9341:-:*:*:*:*:*:*:*

    • Configuration 47:
  • cpe:/o:qualcomm:wcd9360_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wcd9360:-:*:*:*:*:*:*:*

    • Configuration 48:
  • cpe:/o:qualcomm:wcd9370_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wcd9370:-:*:*:*:*:*:*:*

    • Configuration 49:
  • cpe:/o:qualcomm:wcd9371_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wcd9371:-:*:*:*:*:*:*:*

    • Configuration 50:
  • cpe:/o:qualcomm:wcd9375_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wcd9375:-:*:*:*:*:*:*:*

    • Configuration 51:
  • cpe:/o:qualcomm:wcd9380_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wcd9380:-:*:*:*:*:*:*:*

    • Configuration 52:
  • cpe:/o:qualcomm:wcd9385_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wcd9385:-:*:*:*:*:*:*:*

    • Configuration 53:
  • cpe:/o:qualcomm:wcn3910_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wcn3910:-:*:*:*:*:*:*:*

    • Configuration 54:
  • cpe:/o:qualcomm:wcn3950_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wcn3950:-:*:*:*:*:*:*:*

    • Configuration 55:
  • cpe:/o:qualcomm:wcn3980_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wcn3980:-:*:*:*:*:*:*:*

    • Configuration 56:
  • cpe:/o:qualcomm:wcn3988_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wcn3988:-:*:*:*:*:*:*:*

    • Configuration 57:
  • cpe:/o:qualcomm:wcn3990_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wcn3990:-:*:*:*:*:*:*:*

    • Configuration 58:
  • cpe:/o:qualcomm:wcn3991_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wcn3991:-:*:*:*:*:*:*:*

    • Configuration 59:
  • cpe:/o:qualcomm:wcn3998_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wcn3998:-:*:*:*:*:*:*:*

    • Configuration 60:
  • cpe:/o:qualcomm:wcn3999_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wcn3999:-:*:*:*:*:*:*:*

    • Configuration 61:
  • cpe:/o:qualcomm:wcn6850_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wcn6850:-:*:*:*:*:*:*:*

    • Configuration 62:
  • cpe:/o:qualcomm:whs9410_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:whs9410:-:*:*:*:*:*:*:*

    • Configuration 63:
  • cpe:/o:qualcomm:wsa8810_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wsa8810:-:*:*:*:*:*:*:*

    • Configuration 64:
  • cpe:/o:qualcomm:wsa8815_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wsa8815:-:*:*:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/h:qualcomm:snapdragon_mobile:-:*:*:*:*:*:*:*
  • OR cpe:/h:qualcomm:snapdragon_auto:-:*:*:*:*:*:*:*
  • OR cpe:/h:qualcomm:snapdragon_compute:-:*:*:*:*:*:*:*
  • OR cpe:/h:qualcomm:snapdragon_connectivity:-:*:*:*:*:*:*:*
  • OR cpe:/h:qualcomm:snapdragon_consumer_internet_of_things:-:*:*:*:*:*:*:*
  • OR cpe:/h:qualcomm:snapdragon_industrial_internet_of_things:-:*:*:*:*:*:*:*
  • OR cpe:/o:qualcomm:snapdragon_wired_infrastructure_&_networking:-:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    BACK
    qualcomm aqt1000 firmware -
    qualcomm aqt1000 -
    qualcomm ar8035 firmware -
    qualcomm ar8035 -
    qualcomm qca6390 firmware -
    qualcomm qca6390 -
    qualcomm qca6420 firmware -
    qualcomm qca6420 -
    qualcomm qca6430 firmware -
    qualcomm qca6430 -
    qualcomm qca6574a firmware -
    qualcomm qca6574a -
    qualcomm qca6574au firmware -
    qualcomm qca6574au -
    qualcomm qca6595 firmware -
    qualcomm qca6595 -
    qualcomm qca6595au firmware -
    qualcomm qca6595au -
    qualcomm qca6696 firmware -
    qualcomm qca6696 -
    qualcomm qca9984 firmware -
    qualcomm qca9984 -
    qualcomm qcm2290 firmware -
    qualcomm qcm2290 -
    qualcomm qcm4290 firmware -
    qualcomm qcm4290 -
    qualcomm qcs2290 firmware -
    qualcomm qcs2290 -
    qualcomm qcs405 firmware -
    qualcomm qcs405 -
    qualcomm qcs410 firmware -
    qualcomm qcs410 -
    qualcomm qcs4290 firmware -
    qualcomm qcs4290 -
    qualcomm qcs610 firmware -
    qualcomm qcs610 -
    qualcomm sa6155p firmware -
    qualcomm sa6155p -
    qualcomm sa8150p firmware -
    qualcomm sa8150p -
    qualcomm sa8155 firmware -
    qualcomm sa8155 -
    qualcomm sa8155p firmware -
    qualcomm sa8155p -
    qualcomm sa8195p firmware -
    qualcomm sa8195p -
    qualcomm sd 675 firmware -
    qualcomm sd 675 -
    qualcomm sd 8c firmware -
    qualcomm sd 8c -
    qualcomm sd 8cx firmware -
    qualcomm sd 8cx -
    qualcomm sd460 firmware -
    qualcomm sd460 -
    qualcomm sd480 firmware -
    qualcomm sd480 -
    qualcomm sd662 firmware -
    qualcomm sd662 -
    qualcomm sd675 firmware -
    qualcomm sd675 -
    qualcomm sd678 firmware -
    qualcomm sd678 -
    qualcomm sd720g firmware -
    qualcomm sd720g -
    qualcomm sd730 firmware -
    qualcomm sd730 -
    qualcomm sd7c firmware -
    qualcomm sd7c -
    qualcomm sd855 firmware -
    qualcomm sd855 -
    qualcomm sd888 5g firmware -
    qualcomm sd888 5g -
    qualcomm sdm830 firmware -
    qualcomm sdm830 -
    qualcomm sdx24 firmware -
    qualcomm sdx24 -
    qualcomm sdx50m firmware -
    qualcomm sdx50m -
    qualcomm sdx55 firmware -
    qualcomm sdx55 -
    qualcomm sdx55m firmware -
    qualcomm sdx55m -
    qualcomm sm4125 firmware -
    qualcomm sm4125 -
    qualcomm sm6250 firmware -
    qualcomm sm6250 -
    qualcomm sm6250p firmware -
    qualcomm sm6250p -
    qualcomm wcd9340 firmware -
    qualcomm wcd9340 -
    qualcomm wcd9341 firmware -
    qualcomm wcd9341 -
    qualcomm wcd9360 firmware -
    qualcomm wcd9360 -
    qualcomm wcd9370 firmware -
    qualcomm wcd9370 -
    qualcomm wcd9371 firmware -
    qualcomm wcd9371 -
    qualcomm wcd9375 firmware -
    qualcomm wcd9375 -
    qualcomm wcd9380 firmware -
    qualcomm wcd9380 -
    qualcomm wcd9385 firmware -
    qualcomm wcd9385 -
    qualcomm wcn3910 firmware -
    qualcomm wcn3910 -
    qualcomm wcn3950 firmware -
    qualcomm wcn3950 -
    qualcomm wcn3980 firmware -
    qualcomm wcn3980 -
    qualcomm wcn3988 firmware -
    qualcomm wcn3988 -
    qualcomm wcn3990 firmware -
    qualcomm wcn3990 -
    qualcomm wcn3991 firmware -
    qualcomm wcn3991 -
    qualcomm wcn3998 firmware -
    qualcomm wcn3998 -
    qualcomm wcn3999 firmware -
    qualcomm wcn3999 -
    qualcomm wcn6850 firmware -
    qualcomm wcn6850 -
    qualcomm whs9410 firmware -
    qualcomm whs9410 -
    qualcomm wsa8810 firmware -
    qualcomm wsa8810 -
    qualcomm wsa8815 firmware -
    qualcomm wsa8815 -
    qualcomm snapdragon mobile -
    qualcomm snapdragon auto -
    qualcomm snapdragon compute -
    qualcomm snapdragon connectivity -
    qualcomm snapdragon consumer internet of things -
    qualcomm snapdragon industrial internet of things -
    qualcomm snapdragon wired infrastructure & networking -