CVE-2021-30309

High

Description

Improper size validation of QXDM commands can lead to memory corruption in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

SeverityHigh
CVSS7.8
Exploit probability—
ProductQualcomm Mdm9650 Firmware
PublishedFeb 11, 2022
First seenFeb 11, 2022

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
qualcomm mdm9650_firmwareNo range specified—
qualcomm qca6174a_firmwareNo range specified—
qualcomm qca6390_firmwareNo range specified—
qualcomm qca6391_firmwareNo range specified—
qualcomm qca9377_firmwareNo range specified—
qualcomm qcm6125_firmwareNo range specified—
qualcomm qcs410_firmwareNo range specified—
qualcomm qcs603_firmwareNo range specified—
qualcomm qcs605_firmwareNo range specified—
qualcomm qcs610_firmwareNo range specified—
qualcomm qcs6125_firmwareNo range specified—
qualcomm sd660_firmwareNo range specified—
qualcomm sd665_firmwareNo range specified—
qualcomm sd690_5g_firmwareNo range specified—
qualcomm sd730_firmwareNo range specified—
qualcomm sd765_firmwareNo range specified—
qualcomm sd765g_firmwareNo range specified—
qualcomm sd768g_firmwareNo range specified—
qualcomm sd865_5g_firmwareNo range specified—
qualcomm sd870_firmwareNo range specified—
qualcomm sdx12_firmwareNo range specified—
qualcomm sdx55m_firmwareNo range specified—
qualcomm sdxr1_firmwareNo range specified—
qualcomm sm7250p_firmwareNo range specified—
qualcomm wcd9326_firmwareNo range specified—
qualcomm wcd9335_firmwareNo range specified—
qualcomm wcd9341_firmwareNo range specified—
qualcomm wcd9370_firmwareNo range specified—
qualcomm wcd9375_firmwareNo range specified—
qualcomm wcd9380_firmwareNo range specified—
qualcomm wcd9385_firmwareNo range specified—
qualcomm wcn3950_firmwareNo range specified—
qualcomm wcn3980_firmwareNo range specified—
qualcomm wcn3988_firmwareNo range specified—
qualcomm wcn3990_firmwareNo range specified—
qualcomm wcn3991_firmwareNo range specified—
qualcomm wcn3998_firmwareNo range specified—
qualcomm wcn6850_firmwareNo range specified—
qualcomm wcn6851_firmwareNo range specified—
qualcomm wsa8810_firmwareNo range specified—
qualcomm wsa8815_firmwareNo range specified—
qualcomm wsa8830_firmwareNo range specified—
qualcomm wsa8835_firmwareNo range specified—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.