CVEs-PoC/2021/CVE-2021-1962.md

### [CVE-2021-1962](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-1962)
![](https://img.shields.io/static/v1?label=Product&message=Snapdragon%20Auto%2C%20Snapdragon%20Consumer%20IOT%2C%20Snapdragon%20Industrial%20IOT%2C%20Snapdragon%20Mobile%2C%20Snapdragon%20Wearables%2C%20Snapdragon%20Wired%20Infrastructure%20and%20Networking&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=AQT1000%2C%20AR9380%2C%20FSM10055%2C%20FSM10056%2C%20IPQ8064%2C%20IPQ8065%2C%20IPQ8068%2C%20IPQ8069%2C%20MDM9150%2C%20QCA6391%2C%20QCA6420%2C%20QCA6430%2C%20QCA6574%2C%20QCA6574A%2C%20QCA6574AU%2C%20QCA6584AU%2C%20QCA6595%2C%20QCA6595AU%2C%20QCA6696%2C%20QCA9531%2C%20QCA9558%2C%20QCA9561%2C%20QCA9563%2C%20QCA9880%2C%20QCA9882%2C%20QCA9886%2C%20QCA9887%2C%20QCA9888%2C%20QCA9889%2C%20QCA9896%2C%20QCA9898%2C%20QCA9980%2C%20QCA9982%2C%20QCA9984%2C%20QCA9990%2C%20QCA9992%2C%20QCA9994%2C%20QCS410%2C%20QCS605%2C%20QCS610%2C%20Qualcomm215%2C%20SA6145P%2C%20SA6150P%2C%20SA6155%2C%20SA6155P%2C%20SA8145P%2C%20SA8150P%2C%20SA8155%2C%20SA8155P%2C%20SA8195P%2C%20SD%20675%2C%20SD205%2C%20SD210%2C%20SD665%2C%20SD675%2C%20SD678%2C%20SD720G%2C%20SD730%2C%20SD855%2C%20SDA429W%2C%20SDX50M%2C%20SDX55%2C%20SDX55M%2C%20SM6250%2C%20WCD9326%2C%20WCD9335%2C%20WCD9340%2C%20WCD9341%2C%20WCD9370%2C%20WCD9375%2C%20WCD9380%2C%20WCN3610%2C%20WCN3615%2C%20WCN3620%2C%20WCN3660B%2C%20WCN3680%2C%20WCN3950%2C%20WCN3980%2C%20WCN3988%2C%20WCN3990%2C%20WCN3991%2C%20WCN3998%2C%20WSA8810%2C%20WSA8815%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=Buffer%20Copy%20Without%20Checking%20Size%20of%20Input%20in%20Modem&color=brightgreen)

### Description

Buffer Overflow while processing IOCTL for getting peripheral endpoint information there is no proper validation for input maximum endpoint pair and its size in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

### POC

#### Reference
- https://www.qualcomm.com/company/product-security/bulletins/september-2021-bulletin

#### Github
No PoCs found on GitHub currently.