What is CVE-2021-30336?

CVE-2021-30336 is a high-severity vulnerability in Qualcomm Qca6390, classified under Out-of-bounds Read. CVSS score: 8.4/10. Published 2022-01-03.

How severe is CVE-2021-30336?

High severity. CVSS v3 base score is 8.4 out of 10.

Out-of-bounds Read in Qualcomm Qca6390

CVE-2021-30336

Possible out of bound read due to lack of domain input validation while processing APK close session request in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Wearables

Vulnerability class: Buffer Overflow

EPSS: 0.002 (5.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.4 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Qualcomm Qca6390
Qualcomm Qca6390_firmware
Qualcomm Qca6391
Qualcomm Qca6391_firmware
Qualcomm Qca6574
Qualcomm Qca6574a
Qualcomm Qca6574a_firmware
Qualcomm Qca6574au
Qualcomm Qca6574au_firmware
Qualcomm Qca6574_firmware

Weakness classification (CWE)

CWE-125 — Out-of-bounds Read

References

product-security@qualcomm.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2021-30336?: CVE-2021-30336 is a high-severity vulnerability in Qualcomm Qca6390, classified under Out-of-bounds Read. CVSS score: 8.4/10. Published 2022-01-03.
How severe is CVE-2021-30336?: High severity. CVSS v3 base score is 8.4 out of 10.