9.1

CVE-2021-30304

Possible buffer out of bound read can occur due to improper validation of TBTT count and length while parsing the beacon response in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Qualcomm ≫ Qca2062 Firmware Version-
   Qualcomm ≫ Qca2062 Version-
Qualcomm ≫ Qca2064 Firmware Version-
   Qualcomm ≫ Qca2064 Version-
Qualcomm ≫ Qca2065 Firmware Version-
   Qualcomm ≫ Qca2065 Version-
Qualcomm ≫ Qca2066 Firmware Version-
   Qualcomm ≫ Qca2066 Version-
Qualcomm ≫ Sc8280xp Firmware Version-
   Qualcomm ≫ Sc8280xp Version-
Qualcomm ≫ Wcd9380 Firmware Version-
   Qualcomm ≫ Wcd9380 Version-
Qualcomm ≫ Wcd9385 Firmware Version-
   Qualcomm ≫ Wcd9385 Version-
Qualcomm ≫ Wcn6850 Firmware Version-
   Qualcomm ≫ Wcn6850 Version-
Qualcomm ≫ Wcn6851 Firmware Version-
   Qualcomm ≫ Wcn6851 Version-
Qualcomm ≫ Wcn6855 Firmware Version-
   Qualcomm ≫ Wcn6855 Version-
Qualcomm ≫ Wcn6856 Firmware Version-
   Qualcomm ≫ Wcn6856 Version-
Qualcomm ≫ Wsa8830 Firmware Version-
   Qualcomm ≫ Wsa8830 Version-
Qualcomm ≫ Wsa8835 Firmware Version-
   Qualcomm ≫ Wsa8835 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.37% 0.558
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.1 3.9 5.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
nvd@nist.gov 6.4 10 4.9
AV:N/AC:L/Au:N/C:P/I:N/A:P
product-security@qualcomm.com 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.