VULNERABILITY INTELLIGENCE
CVE-2021-30323
CVSS score7.8 HIGH
EPSS probability0.15%
CISA KEVNot currently listed
Published2022-02-11
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
Improper validation of maximum size of data write to EFS file can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Weakness classification
- CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Primary references
- product-security@qualcomm.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory