CVE Feed

    Dashboard / CVE / CVE-2021-30304

    CVE-2021-30304

    Possible buffer out of bound read can occur due to improper validation of TBTT count and length while parsing the beacon response in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity

    Published:Oct 20, 2021
    Last Modified:Nov 21, 2024
    EPS:Oct 20, 2021
    EPSS Score:0.0037
    CVSS Score:7.5

    Affected Products

    Vendor
    Qualcomm
    Product
    Qca2062
    Vendor
    Qualcomm
    Product
    Qca2062 Firmware
    Vendor
    Qualcomm
    Product
    Qca2064
    Vendor
    Qualcomm
    Product
    Qca2064 Firmware
    Vendor
    Qualcomm
    Product
    Qca2065
    Vendor
    Qualcomm
    Product
    Qca2065 Firmware
    Vendor
    Qualcomm
    Product
    Qca2066
    Vendor
    Qualcomm
    Product
    Qca2066 Firmware
    Vendor
    Qualcomm
    Product
    Sc8280xp
    Vendor
    Qualcomm
    Product
    Sc8280xp Firmware
    Vendor
    Qualcomm
    Product
    Wcd9380
    Vendor
    Qualcomm
    Product
    Wcd9380 Firmware
    Vendor
    Qualcomm
    Product
    Wcd9385
    Vendor
    Qualcomm
    Product
    Wcd9385 Firmware
    Vendor
    Qualcomm
    Product
    Wcn6850
    Vendor
    Qualcomm
    Product
    Wcn6850 Firmware
    Vendor
    Qualcomm
    Product
    Wcn6851
    Vendor
    Qualcomm
    Product
    Wcn6851 Firmware
    Vendor
    Qualcomm
    Product
    Wcn6855
    Vendor
    Qualcomm
    Product
    Wcn6855 Firmware
    Vendor
    Qualcomm
    Product
    Wcn6856
    Vendor
    Qualcomm
    Product
    Wcn6856 Firmware
    Vendor
    Qualcomm
    Product
    Wsa8830
    Vendor
    Qualcomm
    Product
    Wsa8830 Firmware
    Vendor
    Qualcomm
    Product
    Wsa8835
    Vendor
    Qualcomm
    Product
    Wsa8835 Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-125 Out-of-bounds Read

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-540 Overread Buffers

    Related CVEs

    CVE-2025-47401 (CVSS 6.5) — Transient DOS when processing target power rate tables during channel configuration.…
    CVE-2025-27066 (CVSS 7.5) — Transient DOS while processing an ANQP message.…
    CVE-2025-21446 (CVSS 7.5) — Transient DOS may occur when processing vendor-specific information elements while parsing a WLAN frame for BT…
    CVE-2025-21448 (CVSS 7.5) — Transient DOS may occur while parsing SSID in action frames.…
    CVE-2025-21441 (CVSS 7.8) — Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver.…
    CVE-2025-21440 (CVSS 7.8) — Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver.…
    CVE-2024-45542 (CVSS 7.8) — Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver.…
    CVE-2024-45541 (CVSS 7.8) — Memory corruption when IOCTL call is invoked from user-space to read board data.…
    CVE-2024-43053 (CVSS 7.8) — Memory corruption while invoking IOCTL calls from user space to read WLAN target diagnostic information.…
    CVE-2024-43050 (CVSS 7.8) — Memory corruption while invoking IOCTL calls from user space to issue factory test command inside WLAN driver.…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High