CVE-2021-30273

HIGH

Qualcomm Firmware - Reachable Assertion via IPv6 Destination Options Header

Title source: llm

Description

Possible assertion due to improper handling of IPV6 packet with invalid length in destination options header in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables

References (1)

Core 1

Core References

Vendor Advisory x_refsource_confirm

https://www.qualcomm.com/company/product-security/bulletins/december-2021-bulletin

Scores

CVSS v3 7.5

EPSS 0.0026

EPSS Percentile 49.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE

CWE-617

Status published

Products (50)

qualcomm/apq8009w_firmware

qualcomm/apq8096au_firmware

qualcomm/ar6003_firmware

qualcomm/csrb31024_firmware

qualcomm/mdm8207_firmware

qualcomm/mdm9205_firmware

qualcomm/mdm9206_firmware

qualcomm/mdm9207_firmware

qualcomm/mdm9215_firmware

qualcomm/mdm9250_firmware

... and 40 more

Published Jan 03, 2022

Tracked Since Feb 18, 2026