CVE-2021-30351

—

CVSS 3.1

9.8 critical

EPSS

4%p90

Published

Jan 3, 2022 (Jan 3, 2022)

Modified

Jun 17, 2026

Description

An out of bound memory access can occur due to improper validation of number of frames being passed during music playback in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Vendors: qualcomm
Products: apq8009 firmware, apq8009w firmware, apq8017 firmware, aqt1000 firmware, ar8031 firmware, ar8035 firmware, ar9380 firmware, csr8811 firmware, csra6620 firmware, csra6640 firmware, csrb31024 firmware, fsm10055 firmware
Weakness: CWE-120
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (4.0%)

In the news2 stories

Critical Chipset Bugs Open Millions of Android Devices to Remote Spying

The Hacker NewsApr 22, 03:36 UTC · Apr 22, 2022Exploit / PoC CVE-2021-0674 CVE-2021-0675 CVE-2021-30351

Critical bug in popular chipsets exposes 2/3 of Android devices to hack

Security AffairsApr 21, 20:17 UTC · Apr 21, 2022Exploit / PoC CVE-2021-0674 CVE-2021-0675 CVE-2021-30351