Critical severity · published Nov 12, 2021
CVE-2021-30321
Possible buffer overflow due to lack of parameter length check during MBSSID scan IE parse in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics…
9.8
CVSS
0.8%
EPSS
No
On KEV
Description
Possible buffer overflow due to lack of parameter length check during MBSSID scan IE parse in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.8% · higher than 56% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AF
Aqt1000 Firmware · Qualcomm
All versions, or not specified · source: NVD
QF
Qca1062 Firmware · Qualcomm
All versions, or not specified · source: NVD
QF
Qca1064 Firmware · Qualcomm
All versions, or not specified · source: NVD
QF
Qca2066 Firmware · Qualcomm
All versions, or not specified · source: NVD
QF
Qca6320 Firmware · Qualcomm
All versions, or not specified · source: NVD
QF
Qca6391 Firmware · Qualcomm
All versions, or not specified · source: NVD
QF
Qca6420 Firmware · Qualcomm
All versions, or not specified · source: NVD
QF
Qca6430 Firmware · Qualcomm
All versions, or not specified · source: NVD
S8
SD 8cx Firmware · Qualcomm
All versions, or not specified · source: NVD
SF
Sc8280xp Firmware · Qualcomm
All versions, or not specified · source: NVD
WF
Wcd9340 Firmware · Qualcomm
All versions, or not specified · source: NVD
WF
Wcd9341 Firmware · Qualcomm
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-30321
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-30321
Vendor Advisory
https://www.qualcomm.com/company/product-security/bulletins/november-2021-bulletin
More from Aqt1000 Firmware
8.6
CVE-2025-21479
Incorrect Authorization in Graphics
8.6
CVE-2025-21480
Incorrect Authorization in Graphics Windows
7.8
CVE-2023-33107
Integer Overflow or Wraparound in Graphics Linux
7.8
CVE-2023-33063
Use After Free in DSP Services
7.8
CVE-2020-11261
Qualcomm Multiple Chipsets Improper Input Validation Vulnerability