VULNERABILITY INTELLIGENCE

CVE-2021-30331

CVSS score5.5 MEDIUM
EPSS probability0.14%
CISA KEVNot currently listed
Published2022-04-01
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

Possible buffer overflow due to improper data validation of external commands sent via DIAG interface in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Weakness classification

  • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Primary references