Medium severity · published Feb 11, 2022
CVE-2021-30325
Possible out of bound access of DCI resources due to lack of validation process and resource allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon…
6.7
CVSS
0.1%
EPSS
No
On KEV
Description
Possible out of bound access of DCI resources due to lack of validation process and resource allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 4% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AF
Apq8096au Firmware · Qualcomm
All versions, or not specified · source: NVD
AF
Ar8031 Firmware · Qualcomm
All versions, or not specified · source: NVD
AF
Ar8035 Firmware · Qualcomm
All versions, or not specified · source: NVD
AF
Ar9380 Firmware · Qualcomm
All versions, or not specified · source: NVD
CF
Csr8811 Firmware · Qualcomm
All versions, or not specified · source: NVD
CF
Csra6620 Firmware · Qualcomm
All versions, or not specified · source: NVD
CF
Csra6640 Firmware · Qualcomm
All versions, or not specified · source: NVD
IF
Ipq4018 Firmware · Qualcomm
All versions, or not specified · source: NVD
IF
Ipq4019 Firmware · Qualcomm
All versions, or not specified · source: NVD
IF
Ipq4028 Firmware · Qualcomm
All versions, or not specified · source: NVD
IF
Ipq4029 Firmware · Qualcomm
All versions, or not specified · source: NVD
IF
Ipq5010 Firmware · Qualcomm
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-30325
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-30325
Patch
https://www.qualcomm.com/company/product-security/bulletins/february-2022-bulletin
More from Apq8096au Firmware
7.8
CVE-2020-11261
Qualcomm Multiple Chipsets Improper Input Validation Vulnerability
7.8
CVE-2021-1905
Qualcomm Multiple Chipsets Use-After-Free Vulnerability
5.5
CVE-2021-1906
Qualcomm Multiple Chipsets Detection of Error Condition Without Action Vulnerability
9.8
CVE-2022-40510
Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder
9.8
CVE-2022-40537
Memory corruption in Bluetooth HOST while processing the AVRC_PDU_GET_PLAYER_APP_VALUE_TEXT AVRCP response