Search/CVE-2021-30279
● CVE — High

CVE-2021-30279

VendorqualcommProductqcs405 firmware, qca6390 firmware, qrb5165 firmware, qcm4290 firmware, qcs4290 firmware, qsm8250 firmware, sd660 firmware, ar8035 firmware, qca6391 firmware, qca9984 firmware, qcm2290 firmware, qcs2290 firmware, qca6426 firmware, qca6436 firmware, qca8337 firmware, qcx315 firmware, sd480 firmware, qcm6490 firmware, qcs6490 firmware, sd460 firmware, qrb5165n firmware, sd690 5g firmware, sd662 firmware, sd750g firmware, sd765 firmwareDiscoveredJan 3, 2022UpdatedNov 21, 2024

Possible access control violation while setting current permission for VMIDs due to improper permission masking in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking

CVSS v3.1
7.8 HIGH
EPSS
0.14%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
CVSS v3.1 Detail
Attack VectorLOCAL
Attack ComplexityLOW
Privileges RequiredLOW
User InteractionNONE
ScopeUNCHANGED
ConfidentialityHIGH
IntegrityHIGH
AvailabilityHIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Connections
26 relationships
Timeline
disclosure → media coverage
Jan 3, 2022
Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024