What is CVE-2021-30314?

CVE-2021-30314 is a medium-severity vulnerability in Qualcomm Qca6390, classified under Information Disclosure. CVSS score: 6.2/10. Published 2022-01-13.

How severe is CVE-2021-30314?

Medium severity. CVSS v3 base score is 6.2 out of 10.

Information disclosure in Qualcomm Qca6390

CVE-2021-30314

Lack of validation for third party application accessing the service can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Vulnerability class: Information Disclosure

EPSS: 0.001 (4.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.2 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Qualcomm Qca6390
Qualcomm Qca6390_firmware
Qualcomm Qca6391
Qualcomm Qca6391_firmware
Qualcomm Qca6426
Qualcomm Qca6426_firmware
Qualcomm Qca6436
Qualcomm Qca6436_firmware
Qualcomm Qca6574
Qualcomm Qca6574a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

product-security@qualcomm.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2021-30314?: CVE-2021-30314 is a medium-severity vulnerability in Qualcomm Qca6390, classified under Information Disclosure. CVSS score: 6.2/10. Published 2022-01-13.
How severe is CVE-2021-30314?: Medium severity. CVSS v3 base score is 6.2 out of 10.