CVEvulnerability
CVE-2021-30305
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2021-10-20
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.4 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-20
Description
Possible out of bound access due to lack of validation of page offset before page is inserted in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
Affected configurations
• qualcomm qca6174a firmware
• qualcomm qca6391 firmware
• qualcomm qca6574 firmware
• qualcomm qca6574a firmware
• qualcomm qca6574au firmware
• qualcomm qca6595au firmware
• qualcomm qca6696 firmware
• qualcomm qca9377 firmware
• qualcomm qcm6490 firmware
• qualcomm qcs6490 firmware
• qualcomm sa6145p firmware
• qualcomm sa6150p firmware
• qualcomm sa6155 firmware
• qualcomm sa6155p firmware
• qualcomm sa8145p firmware
• qualcomm sa8150p firmware
• qualcomm sa8155 firmware
• qualcomm sa8155p firmware
• qualcomm sa8195p firmware
• qualcomm sd480 firmware
• qualcomm sd778g firmware
• qualcomm sd780g firmware
• qualcomm sd888 5g firmware
• qualcomm sdx12 firmware
• qualcomm sm7325 firmware
• qualcomm wcd9335 firmware
• qualcomm wcd9341 firmware
• qualcomm wcd9370 firmware
• qualcomm wcd9375 firmware
• qualcomm wcd9380 firmware
• qualcomm wcd9385 firmware
• qualcomm wcn3988 firmware
• qualcomm wcn3991 firmware
• qualcomm wcn6740 firmware
• qualcomm wcn6750 firmware
• qualcomm wcn6850 firmware
• qualcomm wcn6851 firmware
• qualcomm wcn6855 firmware
• qualcomm wcn6856 firmware
• qualcomm wsa8830 firmware
• qualcomm wsa8835 firmware
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- https://www.qualcomm.com/company/product-security/bulletins/october-2021-bulletin Patch, Vendor Advisory
- https://www.qualcomm.com/company/product-security/bulletins/october-2021-bulletin Patch, Vendor Advisory