NetSight
high7.8

CVE-2021-30303

Possible buffer overflow due to lack of buffer length check when segmented WMI command is received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectiv…

Impact

Possible buffer overflow due to lack of buffer length check when segmented WMI command is received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

Affected products

VendorProductAffected versions
QualcommApq8009 Firmware
All versions
QualcommApq8017 Firmware
All versions
QualcommApq8064au Firmware
All versions
QualcommApq8096au Firmware
All versions
QualcommAqt1000 Firmware
All versions
QualcommAr7420 Firmware
All versions
QualcommAr8031 Firmware
All versions
QualcommAr8035 Firmware
All versions
QualcommAr9380 Firmware
All versions
QualcommCsr8811 Firmware
All versions
QualcommCsra6620 Firmware
All versions
QualcommCsra6640 Firmware
All versions

Weakness classification

References