CVE-2021-1967: Qualcomm APQ8009 Firmware

Medium severity, CVSS 5.3. EPSS: 0.1% chance of exploitation in the next 30 days.

Possible stack buffer overflow due to lack of check on the maximum number of post NAN discovery attributes while processing a NAN Match event in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Affected products

Qualcomm APQ8009 Firmware: affected versions not specified
Qualcomm APQ8053 Firmware: affected versions not specified
Qualcomm AQT1000 Firmware: affected versions not specified
Qualcomm AR8031 Firmware: affected versions not specified
Qualcomm AR8035 Firmware: affected versions not specified
Qualcomm CSRA6620 Firmware: affected versions not specified
Qualcomm CSRA6640 Firmware: affected versions not specified
Qualcomm MDM9206 Firmware: affected versions not specified
Qualcomm MDM9628 Firmware: affected versions not specified
Qualcomm QCA6174A Firmware: affected versions not specified
Qualcomm QCA6390 Firmware: affected versions not specified
Qualcomm QCA6391 Firmware: affected versions not specified
Qualcomm QCA6420 Firmware: affected versions not specified
Qualcomm QCA6421 Firmware: affected versions not specified
Qualcomm QCA6426 Firmware: affected versions not specified
Qualcomm QCA6430 Firmware: affected versions not specified
Qualcomm QCA6431 Firmware: affected versions not specified
Qualcomm QCA6436 Firmware: affected versions not specified
Qualcomm QCA6564A Firmware: affected versions not specified
Qualcomm QCA6564AU Firmware: affected versions not specified
Qualcomm QCA6574 Firmware: affected versions not specified
Qualcomm QCA6574A Firmware: affected versions not specified
Qualcomm QCA6574AU Firmware: affected versions not specified
Qualcomm QCA6595 Firmware: affected versions not specified
Qualcomm QCA6595AU Firmware: affected versions not specified
and 85 more

Published 2021-10-20. Last modified 2026-06-17.