CVE-2021-30290

HIGH

Qualcomm Firmware - Null Pointer Dereference via Timeline Fence Race Condition

Title source: llm

Description

Possible null pointer dereference due to race condition between timeline fence signal and time line fence destroy in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

References (1)

Core 1

Core References

Patch, Vendor Advisory x_refsource_confirm

https://www.qualcomm.com/company/product-security/bulletins/september-2021-bulletin

Scores

CVSS v3 8.4

EPSS 0.0003

EPSS Percentile 10.0%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-367 CWE-476

Status published

Products (41)

qualcomm/qca6174a_firmware

qualcomm/qca6574_firmware

qualcomm/qca6574a_firmware

qualcomm/qca6574au_firmware

qualcomm/qca6595au_firmware

qualcomm/qca6696_firmware

qualcomm/qca9377_firmware

qualcomm/qcm6490_firmware

qualcomm/qcs6490_firmware

qualcomm/sa6145p_firmware

... and 31 more

Published Sep 09, 2021

Tracked Since Feb 18, 2026