VULNERABILITY INTELLIGENCE
CVE-2021-30267
CVSS score7.8 HIGH
EPSS probability0.15%
CISA KEVNot currently listed
Published2022-01-03
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
Possible integer overflow to buffer overflow due to improper input validation in FTM ARA commands in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
Weakness classification
- nvd@nist.gov: CWE-190
Primary references
- product-security@qualcomm.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory