What is CVE-2021-30339?

CVE-2021-30339 is a critical-severity vulnerability in Qualcomm Ar8035. CVSS score: 9.0/10. Published 2022-06-14.

How severe is CVE-2021-30339?

Critical severity. CVSS v3 base score is 9.0 out of 10.

Vulnerability in Qualcomm Ar8035

CVE-2021-30339

Reading PRNG output may lead to improper key generation due to lack of buffer validation in Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

EPSS: 0.002 (5.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.0 (Critical). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N.

Affected products

Qualcomm Ar8035
Qualcomm Ar8035_firmware
Qualcomm Qca6391
Qualcomm Qca6391_firmware
Qualcomm Qca8081
Qualcomm Qca8081_firmware
Qualcomm Qca8337
Qualcomm Qca8337_firmware
Qualcomm Qca9984
Qualcomm Qca9984_firmware

References

product-security@qualcomm.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2021-30339?: CVE-2021-30339 is a critical-severity vulnerability in Qualcomm Ar8035. CVSS score: 9.0/10. Published 2022-06-14.
How severe is CVE-2021-30339?: Critical severity. CVSS v3 base score is 9.0 out of 10.