CVE-2021-30278

HIGH

Qualcomm AR8031 and related firmware - Information Disclosure via TrustZone Memory Transfer Interface

Title source: llm

Description

Improper input validation in TrustZone memory transfer interface can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

References (1)

Core 1

Core References

Vendor Advisory x_refsource_confirm

https://www.qualcomm.com/company/product-security/bulletins/december-2021-bulletin

Scores

CVSS v3 7.1

EPSS 0.0004

EPSS Percentile 13.8%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Details

CWE

CWE-20

Status published

Products (50)

qualcomm/ar8031_firmware

qualcomm/ar8035_firmware

qualcomm/csr8811_firmware

qualcomm/csra6620_firmware

qualcomm/csra6640_firmware

qualcomm/csrb31024_firmware

qualcomm/fsm10055_firmware

qualcomm/fsm10056_firmware

qualcomm/ipq6000_firmware

qualcomm/ipq6005_firmware

... and 40 more

Published Jan 03, 2022

Tracked Since Feb 18, 2026