NetSight
critical9.3

CVE-2021-30317

Improper validation of program headers containing ELF metadata can lead to image verification bypass in Snapdragon Auto, Snapdragon Compute, Snapdragon Connect…

Impact

Improper validation of program headers containing ELF metadata can lead to image verification bypass in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

Affected products

VendorProductAffected versions
QualcommAqt1000 Firmware
All versions
QualcommAr8031 Firmware
All versions
QualcommAr8035 Firmware
All versions
QualcommCsra6620 Firmware
All versions
QualcommCsra6640 Firmware
All versions
QualcommCsrb31024 Firmware
All versions
QualcommMdm9150 Firmware
All versions
QualcommMdm9250 Firmware
All versions
QualcommMdm9650 Firmware
All versions
QualcommQca6174a Firmware
All versions
QualcommQca6390 Firmware
All versions
QualcommQca6391 Firmware
All versions

Weakness classification

References