Search/CVE-2021-30336
● CVE — High

CVE-2021-30336

VendorqualcommProductqca6574 firmware, qca6574au firmware, sd 675 firmware, sa6155p firmware, qca6390 firmware, sa8155p firmware, qcm4290 firmware, qcs4290 firmware, sa6145p firmware, sa6155 firmware, sa8155 firmware, sa6150p firmware, sa8150p firmware, sa8195p firmware, qca6391 firmware, qcm2290 firmware, qcs2290 firmware, qca6574a firmware, qca6595au firmware, qca6696 firmware, qualcomm215 firmware, sa8145p firmware, qcm6490 firmware, qcs6490 firmware, sd460 firmwareDiscoveredJan 3, 2022UpdatedNov 21, 2024

Possible out of bound read due to lack of domain input validation while processing APK close session request in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Wearables

CVSS v3.1
8.4 HIGH
EPSS
0.15%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
CVSS v3.1 Detail
Attack VectorLOCAL
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
ScopeUNCHANGED
ConfidentialityHIGH
IntegrityHIGH
AvailabilityHIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Connections
26 relationships
Timeline
disclosure → media coverage
Jan 3, 2022
Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024