Actively exploited in the wild
Qualcomm Multiple Chipsets Detection of Error Condition Without Action Vulnerability
Qualcomm - Multiple Chipsets · Listed in the CISA KEV since 2021-11-03. This indicates confirmed attacks in production environments.
Required action: Apply updates per vendor instructions.
CVE-2021-1906
MediumCVSS 6.2KEVSummary
Improper handling of address deregistration on failure can lead to new GPU address allocation failure. The vulnerability affects multiple Qualcomm Snapdragon platforms, including Auto, Compute, Connectivity, Consumer IOT, Industrial IOT, Mobile, Voice & Music, and Wearables.
Risk Assessment
It may cause GPU memory allocation failures, leading to system instability or denial of service on devices with Snapdragon chipsets.
Recommendation
Apply security updates provided by the vendor for the relevant Snapdragon platforms that fix the GPU address deregistration handling.
Other vulnerabilities in Qualcomm Snapdragon
See all- CVE-2022-22071HighActively exploited
Possible use after free when process shell memory is freed using IOCTL munmap call and process initialization is in progress. This affects Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music.
- CVE-2020-11261HighActively exploited
Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables.
Original NVD description (English source)
Improper handling of address deregistration on failure can lead to new GPU address allocation failure. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables