What is CVE-2021-30304?

CVE-2021-30304 is a high-severity vulnerability in Qualcomm Qca2062, classified under Out-of-bounds Read. CVSS score: 7.5/10. Published 2021-10-20.

How severe is CVE-2021-30304?

High severity. CVSS v3 base score is 7.5 out of 10.

Out-of-bounds Read in Qualcomm Qca2062

CVE-2021-30304

Possible buffer out of bound read can occur due to improper validation of TBTT count and length while parsing the beacon response in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity

Vulnerability class: Buffer Overflow

EPSS: 0.006 (46.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Qualcomm Qca2062
Qualcomm Qca2062_firmware
Qualcomm Qca2064
Qualcomm Qca2064_firmware
Qualcomm Qca2065
Qualcomm Qca2065_firmware
Qualcomm Qca2066
Qualcomm Qca2066_firmware
Qualcomm Sc8280xp
Qualcomm Sc8280xp_firmware

Weakness classification (CWE)

CWE-125 — Out-of-bounds Read

References

product-security@qualcomm.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2021-30304?: CVE-2021-30304 is a high-severity vulnerability in Qualcomm Qca2062, classified under Out-of-bounds Read. CVSS score: 7.5/10. Published 2021-10-20.
How severe is CVE-2021-30304?: High severity. CVSS v3 base score is 7.5 out of 10.