What is CVE-2021-1950?

CVE-2021-1950 is a high-severity vulnerability in Qualcomm Ar8035, classified under Improper Authentication. CVSS score: 7.8/10. Published 2022-04-01.

How severe is CVE-2021-1950?

High severity. CVSS v3 base score is 7.8 out of 10.

Auth bypass in Qualcomm Ar8035

CVE-2021-1950

Improper cleaning of secure memory between authenticated users can lead to face authentication bypass in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking

Vulnerability class: Broken Authentication

EPSS: 0.002 (4.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Qualcomm Ar8035
Qualcomm Ar8035_firmware
Qualcomm Csr8811
Qualcomm Csr8811_firmware
Qualcomm Ipq6000
Qualcomm Ipq6000_firmware
Qualcomm Ipq6005
Qualcomm Ipq6005_firmware
Qualcomm Ipq6010
Qualcomm Ipq6010_firmware

Weakness classification (CWE)

CWE-287 — Improper Authentication

References

product-security@qualcomm.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2021-1950?: CVE-2021-1950 is a high-severity vulnerability in Qualcomm Ar8035, classified under Improper Authentication. CVSS score: 7.8/10. Published 2022-04-01.
How severe is CVE-2021-1950?: High severity. CVSS v3 base score is 7.8 out of 10.