CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2021-05-07
Qualcomm Snapdragon GPU Driver Use-After-Free Vulnerability (CVE-2021-1905) Technical Analysis and Hardening Guide
[Affected Scope] Multiple Qualcomm Snapdragon chipsets including Auto, Compute, Connectivity, Mobile, and Wearables
[Impact] Local attackers can exploit improper memory mapping handling across multiple processes to achieve Use-After-Free (UAF), leading to Local Privilege Escalation (LPE) and kernel-level code execution
[Mitigation] Apply the official security patches released by Qualcomm and device OEMs, and restrict unauthorized local process execution