What is CVE-2021-30273?

CVE-2021-30273 is a high-severity vulnerability in Qualcomm Apq8009w, classified under Reachable Assertion. CVSS score: 7.5/10. Published 2022-01-03.

How severe is CVE-2021-30273?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Qualcomm Apq8009w

CVE-2021-30273

Possible assertion due to improper handling of IPV6 packet with invalid length in destination options header in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables

EPSS: 0.006 (43.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Qualcomm Apq8009w
Qualcomm Apq8009w_firmware
Qualcomm Apq8096au
Qualcomm Apq8096au_firmware
Qualcomm Ar6003
Qualcomm Ar6003_firmware
Qualcomm Csrb31024
Qualcomm Csrb31024_firmware
Qualcomm Mdm8207
Qualcomm Mdm8207_firmware

Weakness classification (CWE)

CWE-617 — Reachable Assertion

References

product-security@qualcomm.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2021-30273?: CVE-2021-30273 is a high-severity vulnerability in Qualcomm Apq8009w, classified under Reachable Assertion. CVSS score: 7.5/10. Published 2022-01-03.
How severe is CVE-2021-30273?: High severity. CVSS v3 base score is 7.5 out of 10.