CVEs-PoC/2021/CVE-2021-1933.md

### [CVE-2021-1933](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-1933)
![](https://img.shields.io/static/v1?label=Product&message=Snapdragon%20Auto%2C%20Snapdragon%20Compute%2C%20Snapdragon%20Connectivity%2C%20Snapdragon%20Consumer%20IOT%2C%20Snapdragon%20Industrial%20IOT%2C%20Snapdragon%20Wearables&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=APQ8017%2C%20APQ8053%2C%20AQT1000%2C%20CSRB31024%2C%20MSM8917%2C%20MSM8920%2C%20MSM8940%2C%20MSM8953%2C%20QCA6174A%2C%20QCA6310%2C%20QCA6335%2C%20QCA6390%2C%20QCA6420%2C%20QCA6430%2C%20QCA6564AU%2C%20QCA6574A%2C%20QCA6574AU%2C%20QCA6584AU%2C%20QCA6595AU%2C%20QCA6696%2C%20QCA9377%2C%20QCM4290%2C%20QCM6125%2C%20QCS410%2C%20QCS4290%2C%20QCS603%2C%20QCS605%2C%20QCS610%2C%20QCS6125%2C%20Qualcomm215%2C%20SA415M%2C%20SA8155%2C%20SA8155P%2C%20SC8180X%2BSDX55%2C%20SD%20455%2C%20SD%20636%2C%20SD%20675%2C%20SD%208C%2C%20SD%208CX%2C%20SD429%2C%20SD439%2C%20SD450%2C%20SD632%2C%20SD665%2C%20SD670%2C%20SD675%2C%20SD678%2C%20SD712%2C%20SD720G%2C%20SD730%2C%20SD850%2C%20SD855%2C%20SDA429W%2C%20SDM429W%2C%20SDM630%2C%20SDX24%2C%20SDX50M%2C%20SDX55%2C%20SDX55M%2C%20SDXR1%2C%20SM6250%2C%20SM6250P%2C%20WCD9360%2C%20WCD9370%2C%20WCD9371%2C%20WCD9375%2C%20WCD9380%2C%20WCN3610%2C%20WCN3615%2C%20WCN3620%2C%20WCN3660%2C%20WCN3660B%2C%20WCN3680%2C%20WCN3680B%2C%20WCN3910%2C%20WCN3950%2C%20WCN3988%2C%20WCN3991%2C%20WCN3998%2C%20WCN6850%2C%20WHS9410%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=Improper%20Validation%20of%20Array%20Index%20in%20Modem&color=brightgreen)

### Description

UE assertion is possible due to improper validation of invite message with SDP body in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables

### POC

#### Reference
- https://www.qualcomm.com/company/product-security/bulletins/september-2021-bulletin

#### Github
No PoCs found on GitHub currently.