CVE-2021-1899: Qualcomm APQ8009W Firmware

Medium severity, CVSS 4.6. EPSS: 0.1% chance of exploitation in the next 30 days.

Possible buffer over read due to lack of length check while flashing meta images in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Affected products

• Qualcomm APQ8009W Firmware: affected versions not specified
• Qualcomm AQT1000 Firmware: affected versions not specified
• Qualcomm MSM8909W Firmware: affected versions not specified
• Qualcomm QCA4020 Firmware: affected versions not specified
• Qualcomm QCA6174A Firmware: affected versions not specified
• Qualcomm QCA6420 Firmware: affected versions not specified
• Qualcomm QCA6430 Firmware: affected versions not specified
• Qualcomm QCA9379 Firmware: affected versions not specified
• Qualcomm QUALCOMM215 Firmware: affected versions not specified
• Qualcomm SD205 Firmware: affected versions not specified
• Qualcomm SD210 Firmware: affected versions not specified
• Qualcomm SD675 Firmware: affected versions not specified
• Qualcomm SD678 Firmware: affected versions not specified
• Qualcomm SD720G Firmware: affected versions not specified
• Qualcomm SD730 Firmware: affected versions not specified
• Qualcomm SD855 Firmware: affected versions not specified
• Qualcomm Sd 675 Firmware: affected versions not specified
• Qualcomm SDA429W Firmware: affected versions not specified
• Qualcomm SDM429W Firmware: affected versions not specified
• Qualcomm SDX50M Firmware: affected versions not specified
• Qualcomm SDX55 Firmware: affected versions not specified
• Qualcomm SDX55M Firmware: affected versions not specified
• Qualcomm SM6250 Firmware: affected versions not specified
• Qualcomm WCD9326 Firmware: affected versions not specified
• Qualcomm WCD9341 Firmware: affected versions not specified
• and 16 more

Published 2021-07-13. Last modified 2026-06-17.