CVE-2021-30306

Published Oct 20, 2021

Last updated 5 months ago

Overview

Description
Possible buffer over read due to improper buffer allocation for file length passed from user space in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
Source
product-security@qualcomm.com
NVD status
Modified

Risk scores

CVSS 3.1

Type
Primary
Base score
7.1
Impact score
5.2
Exploitability score
1.8
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Severity
HIGH

CVSS 2.0

Type
Primary
Base score
3.6
Impact score
4.9
Exploitability score
3.9
Vector string
AV:L/AC:L/Au:N/C:P/I:N/A:P

Weaknesses

nvd@nist.gov
CWE-125

Social media

Hype score
Not currently trending

Configurations