CVE-2021-30306

HIGH

Snapdragon Auto-Snapdragon Industrial IOT - Buffer Overflow

Title source: llm
STIX 2.1

Description

Possible buffer over read due to improper buffer allocation for file length passed from user space in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

References (1)

Core 1
Core References

Scores

CVSS v3 8.4
EPSS 0.0004
EPSS Percentile 13.0%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-125
Status published
Products (50)
qualcomm/apq8053_firmware
qualcomm/msm8953_firmware
qualcomm/qca6174a_firmware
qualcomm/qca6390_firmware
qualcomm/qca6391_firmware
qualcomm/qca6426_firmware
qualcomm/qca6574_firmware
qualcomm/qca6574a_firmware
qualcomm/qca6574au_firmware
qualcomm/qca6595au_firmware
... and 40 more
Published Oct 20, 2021
Tracked Since Feb 18, 2026