Critical severity · published Oct 20, 2021
CVE-2021-30304
Possible buffer out of bound read can occur due to improper validation of TBTT count and length while parsing the beacon response in Snapdragon Compute, Snapdragon Connectivity,…
9.1
CVSS
0.6%
EPSS
No
On KEV
Description
Possible buffer out of bound read can occur due to improper validation of TBTT count and length while parsing the beacon response in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 49% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
QF
Qca2062 Firmware · Qualcomm
All versions, or not specified · source: NVD
QF
Qca2064 Firmware · Qualcomm
All versions, or not specified · source: NVD
QF
Qca2065 Firmware · Qualcomm
All versions, or not specified · source: NVD
QF
Qca2066 Firmware · Qualcomm
All versions, or not specified · source: NVD
SF
Sc8280xp Firmware · Qualcomm
All versions, or not specified · source: NVD
WF
Wcd9380 Firmware · Qualcomm
All versions, or not specified · source: NVD
WF
Wcd9385 Firmware · Qualcomm
All versions, or not specified · source: NVD
WF
Wcn6850 Firmware · Qualcomm
All versions, or not specified · source: NVD
WF
Wcn6851 Firmware · Qualcomm
All versions, or not specified · source: NVD
WF
Wcn6855 Firmware · Qualcomm
All versions, or not specified · source: NVD
WF
Wcn6856 Firmware · Qualcomm
All versions, or not specified · source: NVD
WF
Wsa8830 Firmware · Qualcomm
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-30304
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-30304
Vendor Advisory
https://www.qualcomm.com/company/product-security/bulletins/october-2021-bulletin
More from Qca2062 Firmware
9.8
CVE-2023-33028
Memory corruption in WLAN Firmware while doing a memory copy of pmk cache
9.8
CVE-2022-40514
Memory corruption due to buffer copy without checking the size of input in WLAN Firmware while processing CCKM IE in reassoc response frame
9.8
CVE-2022-25748
Memory corruption in WLAN due to integer overflow to buffer overflow while parsing GTK frames
9.8
CVE-2020-11264
Improper authentication of Non-EAPOL/WAPI plaintext frames during four-way handshake can lead to arbitrary network packet injection in Snapdragon Auto, Snapdragon Compute,…
9.1
CVE-2021-1980
Possible buffer over read due to lack of length check while parsing beacon IE response in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…