CVE-2021-1950

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 01-04-2022 07:15

Last modified: - 08-04-2022 07:18

Total changes: - 2

Description

Improper cleaning of secure memory between authenticated users can lead to face authentication bypass in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Low

Attack complexity

Local

Attack vector

High

Availability

High

Confidentiality

High

Integrity

Low

Privileges required

Unchanged

Scope

None

User interaction

7.8

Base score

1.8

5.9

Exploitability score

Impact score

Verification logic

AND

vendor=qualcomm AND product=ar8035_firmware AND version=-

vendor=qualcomm AND product=ar8035 AND version=-

AND

vendor=qualcomm AND product=csr8811_firmware AND version=-

vendor=qualcomm AND product=csr8811 AND version=-

AND

vendor=qualcomm AND product=ipq6000_firmware AND version=-

vendor=qualcomm AND product=ipq6000 AND version=-

AND

vendor=qualcomm AND product=ipq6005_firmware AND version=-

vendor=qualcomm AND product=ipq6005 AND version=-

AND

vendor=qualcomm AND product=ipq6010_firmware AND version=-

vendor=qualcomm AND product=ipq6010 AND version=-

AND

vendor=qualcomm AND product=ipq6018_firmware AND version=-

vendor=qualcomm AND product=ipq6018 AND version=-

AND

vendor=qualcomm AND product=ipq6028_firmware AND version=-

vendor=qualcomm AND product=ipq6028 AND version=-

AND

vendor=qualcomm AND product=qca4024_firmware AND version=-

vendor=qualcomm AND product=qca4024 AND version=-

AND

vendor=qualcomm AND product=qca6390_firmware AND version=-

vendor=qualcomm AND product=qca6390 AND version=-

AND

vendor=qualcomm AND product=qca6391_firmware AND version=-

vendor=qualcomm AND product=qca6391 AND version=-

AND

vendor=qualcomm AND product=qca6426_firmware AND version=-

vendor=qualcomm AND product=qca6426 AND version=-

AND

vendor=qualcomm AND product=qca6436_firmware AND version=-

vendor=qualcomm AND product=qca6436 AND version=-

AND

vendor=qualcomm AND product=qca6574au_firmware AND version=-

vendor=qualcomm AND product=qca6574au AND version=-

AND

vendor=qualcomm AND product=qca6696_firmware AND version=-

vendor=qualcomm AND product=qca6696 AND version=-

AND

vendor=qualcomm AND product=qca8072_firmware AND version=-

vendor=qualcomm AND product=qca8072 AND version=-

AND

vendor=qualcomm AND product=qca8075_firmware AND version=-

vendor=qualcomm AND product=qca8075 AND version=-

AND

vendor=qualcomm AND product=qca8081_firmware AND version=-

vendor=qualcomm AND product=qca8081 AND version=-

AND

vendor=qualcomm AND product=qca9984_firmware AND version=-

vendor=qualcomm AND product=qca9984 AND version=-

AND

vendor=qualcomm AND product=qcm2290_firmware AND version=-

vendor=qualcomm AND product=qcm2290 AND version=-

AND

vendor=qualcomm AND product=qcm4290_firmware AND version=-

vendor=qualcomm AND product=qcm4290 AND version=-

AND

vendor=qualcomm AND product=qcm6490_firmware AND version=-

vendor=qualcomm AND product=qcm6490 AND version=-

AND

vendor=qualcomm AND product=qcn5021_firmware AND version=-

vendor=qualcomm AND product=qcn5021 AND version=-

AND

vendor=qualcomm AND product=qcn5022_firmware AND version=-

vendor=qualcomm AND product=qcn5022 AND version=-

AND

vendor=qualcomm AND product=qcn5052_firmware AND version=-

vendor=qualcomm AND product=qcn5052 AND version=-

AND

vendor=qualcomm AND product=qcn5121_firmware AND version=-

vendor=qualcomm AND product=qcn5121 AND version=-

AND

vendor=qualcomm AND product=qcn5122_firmware AND version=-

vendor=qualcomm AND product=qcn5122 AND version=-

AND

vendor=qualcomm AND product=qcn5152_firmware AND version=-

vendor=qualcomm AND product=qcn5152 AND version=-

AND

vendor=qualcomm AND product=qcn6023_firmware AND version=-

vendor=qualcomm AND product=qcn6023 AND version=-

AND

vendor=qualcomm AND product=qcn6024_firmware AND version=-

vendor=qualcomm AND product=qcn6024 AND version=-

AND

vendor=qualcomm AND product=qcn9000_firmware AND version=-

vendor=qualcomm AND product=qcn9000 AND version=-

AND

vendor=qualcomm AND product=qcn9022_firmware AND version=-

vendor=qualcomm AND product=qcn9022 AND version=-

AND

vendor=qualcomm AND product=qcn9024_firmware AND version=-

vendor=qualcomm AND product=qcn9024 AND version=-

AND

vendor=qualcomm AND product=qcn9070_firmware AND version=-

vendor=qualcomm AND product=qcn9070 AND version=-

AND

vendor=qualcomm AND product=qcn9072_firmware AND version=-

vendor=qualcomm AND product=qcn9072 AND version=-

AND

vendor=qualcomm AND product=qcn9074_firmware AND version=-

vendor=qualcomm AND product=qcn9074 AND version=-

AND

vendor=qualcomm AND product=qcs2290_firmware AND version=-

vendor=qualcomm AND product=qcs2290 AND version=-

AND

vendor=qualcomm AND product=qcs405_firmware AND version=-

vendor=qualcomm AND product=qcs405 AND version=-

AND

vendor=qualcomm AND product=qcs4290_firmware AND version=-

vendor=qualcomm AND product=qcs4290 AND version=-

AND

vendor=qualcomm AND product=qcs610_firmware AND version=-

vendor=qualcomm AND product=qcs610 AND version=-

AND

vendor=qualcomm AND product=qcs6490_firmware AND version=-

vendor=qualcomm AND product=qcs6490 AND version=-

AND

vendor=qualcomm AND product=qsm8250_firmware AND version=-

vendor=qualcomm AND product=qsm8250 AND version=-

AND

vendor=qualcomm AND product=sa6145p_firmware AND version=-

vendor=qualcomm AND product=sa6145p AND version=-

AND

vendor=qualcomm AND product=sa6150p_firmware AND version=-

vendor=qualcomm AND product=sa6150p AND version=-

AND

vendor=qualcomm AND product=sa6155p_firmware AND version=-

vendor=qualcomm AND product=sa6155p AND version=-

AND

vendor=qualcomm AND product=sa8145p_firmware AND version=-

vendor=qualcomm AND product=sa8145p AND version=-

AND

vendor=qualcomm AND product=sa8150p_firmware AND version=-

vendor=qualcomm AND product=sa8150p AND version=-

AND

vendor=qualcomm AND product=sa8155p_firmware AND version=-

vendor=qualcomm AND product=sa8155p AND version=-

AND

vendor=qualcomm AND product=sa8195p_firmware AND version=-

vendor=qualcomm AND product=sa8195p AND version=-

AND

vendor=qualcomm AND product=sa8540p_firmware AND version=-

vendor=qualcomm AND product=sa8540p AND version=-

AND

vendor=qualcomm AND product=sa9000p_firmware AND version=-

vendor=qualcomm AND product=sa9000p AND version=-

AND

vendor=qualcomm AND product=sd460_firmware AND version=-

vendor=qualcomm AND product=sd460 AND version=-

AND

vendor=qualcomm AND product=sd480_firmware AND version=-

vendor=qualcomm AND product=sd480 AND version=-

AND

vendor=qualcomm AND product=sd662_firmware AND version=-

vendor=qualcomm AND product=sd662 AND version=-

AND

vendor=qualcomm AND product=sd690_5g_firmware AND version=-

vendor=qualcomm AND product=sd690_5g AND version=-

AND

vendor=qualcomm AND product=sd750g_firmware AND version=-

vendor=qualcomm AND product=sd750g AND version=-

AND

vendor=qualcomm AND product=sd765_firmware AND version=-

vendor=qualcomm AND product=sd765 AND version=-

AND

vendor=qualcomm AND product=sd765g_firmware AND version=-

vendor=qualcomm AND product=sd765g AND version=-

AND

vendor=qualcomm AND product=sd768g_firmware AND version=-

vendor=qualcomm AND product=sd768g AND version=-

AND

vendor=qualcomm AND product=sd778g_firmware AND version=-

vendor=qualcomm AND product=sd778g AND version=-

AND

vendor=qualcomm AND product=sd865_5g_firmware AND version=-

vendor=qualcomm AND product=sd865_5g AND version=-

AND

vendor=qualcomm AND product=sd870_firmware AND version=-

vendor=qualcomm AND product=sd870 AND version=-

AND

vendor=qualcomm AND product=sd888_5g_firmware AND version=-

vendor=qualcomm AND product=sd888_5g AND version=-

AND

vendor=qualcomm AND product=sdx55_firmware AND version=-

vendor=qualcomm AND product=sdx55 AND version=-

AND

vendor=qualcomm AND product=sdx55m_firmware AND version=-

vendor=qualcomm AND product=sdx55m AND version=-

AND

vendor=qualcomm AND product=sdx57m_firmware AND version=-

vendor=qualcomm AND product=sdx57m AND version=-

AND

vendor=qualcomm AND product=sdxr2_5g_firmware AND version=-

vendor=qualcomm AND product=sdxr2_5g AND version=-

AND

vendor=qualcomm AND product=sm6225_firmware AND version=-

vendor=qualcomm AND product=sm6225 AND version=-

AND

vendor=qualcomm AND product=sm6375_firmware AND version=-

vendor=qualcomm AND product=sm6375 AND version=-

AND

vendor=qualcomm AND product=sm7250p_firmware AND version=-

vendor=qualcomm AND product=sm7250p AND version=-

AND

vendor=qualcomm AND product=sm7325p_firmware AND version=-

vendor=qualcomm AND product=sm7325p AND version=-

AND

vendor=qualcomm AND product=sxr2150p_firmware AND version=-

vendor=qualcomm AND product=sxr2150p AND version=-

AND

vendor=qualcomm AND product=wcd9341_firmware AND version=-

vendor=qualcomm AND product=wcd9341 AND version=-

AND

vendor=qualcomm AND product=wcd9370_firmware AND version=-

vendor=qualcomm AND product=wcd9370 AND version=-

AND

vendor=qualcomm AND product=wcd9375_firmware AND version=-

vendor=qualcomm AND product=wcd9375 AND version=-

AND

vendor=qualcomm AND product=wcd9380_firmware AND version=-

vendor=qualcomm AND product=wcd9380 AND version=-

AND

vendor=qualcomm AND product=wcd9385_firmware AND version=-

vendor=qualcomm AND product=wcd9385 AND version=-

AND

vendor=qualcomm AND product=wcn3910_firmware AND version=-

vendor=qualcomm AND product=wcn3910 AND version=-

AND

vendor=qualcomm AND product=wcn3950_firmware AND version=-

vendor=qualcomm AND product=wcn3950 AND version=-

AND

vendor=qualcomm AND product=wcn3980_firmware AND version=-

vendor=qualcomm AND product=wcn3980 AND version=-

AND

vendor=qualcomm AND product=wcn3988_firmware AND version=-

vendor=qualcomm AND product=wcn3988 AND version=-

AND

vendor=qualcomm AND product=wcn3991_firmware AND version=-

vendor=qualcomm AND product=wcn3991 AND version=-

AND

vendor=qualcomm AND product=wcn3998_firmware AND version=-

vendor=qualcomm AND product=wcn3998 AND version=-

AND

vendor=qualcomm AND product=wcn3999_firmware AND version=-

vendor=qualcomm AND product=wcn3999 AND version=-

AND

vendor=qualcomm AND product=wcn6750_firmware AND version=-

vendor=qualcomm AND product=wcn6750 AND version=-

AND

vendor=qualcomm AND product=wcn6850_firmware AND version=-

vendor=qualcomm AND product=wcn6850 AND version=-

AND

vendor=qualcomm AND product=wcn6851_firmware AND version=-

vendor=qualcomm AND product=wcn6851 AND version=-

AND

vendor=qualcomm AND product=wcn6855_firmware AND version=-

vendor=qualcomm AND product=wcn6855 AND version=-

AND

vendor=qualcomm AND product=wcn6856_firmware AND version=-

vendor=qualcomm AND product=wcn6856 AND version=-

AND

vendor=qualcomm AND product=wsa8810_firmware AND version=-

vendor=qualcomm AND product=wsa8810 AND version=-

AND

vendor=qualcomm AND product=wsa8815_firmware AND version=-

vendor=qualcomm AND product=wsa8815 AND version=-

AND

vendor=qualcomm AND product=wsa8830_firmware AND version=-

vendor=qualcomm AND product=wsa8830 AND version=-

AND

vendor=qualcomm AND product=wsa8835_firmware AND version=-

vendor=qualcomm AND product=wsa8835 AND version=-

Reference

https://www.qualcomm.com/company/product-security/bulletins/march-2022-bulletin

Keywords

CVE-2021-1950

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2021-1950

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures