{"id":"CVE-2021-1905","kind":"vulnerability","aliases":["CVE-2021-1905"],"related":[],"title":"Qualcomm Multiple Chipsets: Qualcomm Multiple Chipsets Use-After-Free Vulnerability","description":"Possible use after free due to improper handling of memory mapping of multiple processes simultaneously. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables","summary":"Qualcomm chipsets contain a use-after-free bug in memory mapping when multiple processes map memory at the same time. Local code that exploits it can corrupt kernel memory, and CISA lists it as actively exploited.","severity":"high","cvss":8.4,"epss":0.01543,"exploited":true,"exploited_at":"2021-11-03T00:00:00+00:00","products":[{"name":"Qualcomm Multiple Chipsets","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["android","exploited","infrastructure","mobile-devices","qualcomm-chipset"],"not_affected_if":["unknown"],"how_to_check":null,"fix":"Apply the Qualcomm security bulletin update for your device per vendor instructions; the sources do not name a patched version.","status":"open","published_at":"2021-05-07T09:15:08+00:00","first_seen_at":"2026-10-23T19:11:53+00:00","triaged_at":"2026-10-23T21:41:37+00:00","updated_at":"2026-10-23T21:57:34+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-10-23T21:41:37Z","model":"claude-haiku-5-5","output":{"fix":"Apply the Qualcomm security bulletin update for your device per vendor instructions; the sources do not name a patched version.","reach":"local","impact":"high","summary":"Qualcomm chipsets contain a use-after-free bug in memory mapping when multiple processes map memory at the same time. Local code that exploits it can corrupt kernel memory, and CISA lists it as actively exploited.","category":"infrastructure","who_cares":["android","qualcomm-chipset","mobile-devices"],"confidence":0.6,"needs_auth":"yes","worst_case":"Local attacker gains kernel-level code execution on affected device.","analyst_note":"Find the Qualcomm security bulletin for this CVE and the patched chipset and Android patch level, via the CISA KEV entry or the NVD record.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["unknown"],"user_interaction":"no","needs_special_setup":"no","severity_if_unknown":"high"},"cost_usd":0.000457,"input_tokens":2848,"output_tokens":344,"severity_before":"unknown"},"analyst_status":"queued","analyst_note":"Find the Qualcomm security bulletin for this CVE and the patched chipset and Android patch level, via the CISA KEV entry or the NVD record.","search":"'-1905':14A,17A '-2021':13A,16A 'activ':65B 'android':21B 'auto':84C 'bug':38B 'chipset':3A,6A,29B,31B 'chipsets':20A 'cisa':61B 'code':52B 'comput':86C 'connect':88C 'consum':90C 'contain':32B 'corrupt':57B 'cve':12A,15A 'devic':26B 'due':71C 'exploit':22B,54B,66B 'free':10A,37B,70C 'handl':74C 'improp':73C 'industri':93C 'infrastructur':23B 'iot':91C,94C 'kernel':58B 'list':62B 'local':51B 'map':41B,45B,77C 'memori':40B,46B,59B,76C 'mobil':25B,96C 'mobile-devic':24B 'multipl':2A,5A,43B,79C 'multiple':19A 'music':99C 'possibl':67C 'process':44B,80C 'qualcomm':1A,4A,18A,28B,30B 'qualcomm-chipset':27B 'simultan':81C 'snapdragon':83C,85C,87C,89C,92C,95C,97C,100C 'time':50B 'use':8A,35B,68C 'use-after-fre':7A,34B 'voic':98C 'vulner':11A 'wearabl':101C","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2021-05-07T09:15:08+00:00","kev":{"dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss_by":"product-security@qualcomm.com","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2021-1905","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-1905","severity":null,"published_at":"2021-11-03T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:53+00:00","fetched_at":"2026-10-25T14:39:42+00:00","note":null},{"source":"epss","external_id":"CVE-2021-1905","url":"https://api.first.org/data/v1/epss?cve=CVE-2021-1905","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-23T19:13:43+00:00","fetched_at":"2026-10-23T19:13:43+00:00","note":null},{"source":"nvd","external_id":"CVE-2021-1905","url":"https://nvd.nist.gov/vuln/detail/CVE-2021-1905","severity":null,"published_at":"2021-05-07T09:15:08+00:00","modified_at":"2026-06-17T03:32:47+00:00","first_seen_at":"2026-10-23T21:57:34+00:00","fetched_at":"2026-10-23T21:57:34+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}