Lucene search

[email protected]CVE-2021-30304

HistoryOct 20, 2021 - 7:15 a.m.

CVE-2021-30304

2021-10-2007:15:08

CWE-125

[email protected]

web.nvd.nist.gov

cve-2021-30304

buffer out of bound read

improper validation

snapdragon compute

snapdragon connectivity

snapdragon consumer electronics connectivity

nvd

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:N/A:P

9.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

9.1 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.2%

JSON

Possible buffer out of bound read can occur due to improper validation of TBTT count and length while parsing the beacon response in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity

Affected configurations

NVD

Node

qualcommqca2062_firmwareMatch-

AND

qualcommqca2062Match-

Node

qualcommqca2064_firmwareMatch-

AND

qualcommqca2064Match-

Node

qualcommqca2065_firmwareMatch-

AND

qualcommqca2065Match-

Node

qualcommqca2066_firmwareMatch-

AND

qualcommqca2066Match-

Node

qualcommsc8280xp_firmwareMatch-

AND

qualcommsc8280xpMatch-

Node

qualcommwcd9380_firmwareMatch-

AND

qualcommwcd9380Match-

Node

qualcommwcd9385_firmwareMatch-

AND

qualcommwcd9385Match-

Node

qualcommwcn6850_firmwareMatch-

AND

qualcommwcn6850Match-

Node

qualcommwcn6851_firmwareMatch-

AND

qualcommwcn6851Match-

Node

qualcommwcn6855_firmwareMatch-

AND

qualcommwcn6855Match-

Node

qualcommwcn6856_firmwareMatch-

AND

qualcommwcn6856Match-

Node

qualcommwsa8830_firmwareMatch-

AND

qualcommwsa8830Match-

Node

qualcommwsa8835_firmwareMatch-

AND

qualcommwsa8835Match-

CPENameOperatorVersion
qualcomm:qca2062_firmwarequalcomm qca2062 firmwareeq-

CPE	Name	Operator	Version
qualcomm:qca2062_firmware	qualcomm qca2062 firmware	eq	-

CNA Affected

[
  {
    "product": "Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "QCA2062, QCA2064, QCA2065, QCA2066, SC8280XP, WCD9380, WCD9385, WCN6850, WCN6851, WCN6855, WCN6856, WSA8830, WSA8835"
      }
    ]
  }
]

References

www.qualcomm.com/company/product-security/bulletins/october-2021-bulletin

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:N/A:P

9.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

9.1 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.2%

JSON

Related for CVE-2021-30304

cvelist1 nvd1 prion1