CVE-2021-30300

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-01-13 · updated 2026-06-17
Weakness: CWE-704

Description

Possible denial of service due to incorrectly decoding hex data for the SIB2 OTA message and assigning a garbage value to choice when processing the SRS configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables

Affected products

Qualcomm Apq8009W Firmware: all versions
Qualcomm Apq8017 Firmware: all versions
Qualcomm Apq8096Au Firmware: all versions
Qualcomm Ar8035 Firmware: all versions
Qualcomm Csrb31024 Firmware: all versions
Qualcomm Fsm10055 Firmware: all versions
Qualcomm Fsm10056 Firmware: all versions
Qualcomm Mdm8207 Firmware: all versions
Qualcomm Mdm9150 Firmware: all versions
Qualcomm Mdm9205 Firmware: all versions
Qualcomm Mdm9206 Firmware: all versions
Qualcomm Mdm9207 Firmware: all versions
Qualcomm Mdm9607 Firmware: all versions
Qualcomm Mdm9628 Firmware: all versions
Qualcomm Mdm9640 Firmware: all versions
Qualcomm Msm8909W Firmware: all versions
Qualcomm Msm8996Au Firmware: all versions
Qualcomm Qca4004 Firmware: all versions
Qualcomm Qca6174A Firmware: all versions
Qualcomm Qca6390 Firmware: all versions
Qualcomm Qca6391 Firmware: all versions
Qualcomm Qca6426 Firmware: all versions
Qualcomm Qca6436 Firmware: all versions
Qualcomm Qca6564A Firmware: all versions
Qualcomm Qca6564Au Firmware: all versions
Qualcomm Qca6574 Firmware: all versions
Qualcomm Qca6574A Firmware: all versions
Qualcomm Qca6574Au Firmware: all versions
Qualcomm Qca6584 Firmware: all versions
Qualcomm Qca6584Au Firmware: all versions

References

Get alerted when CVE-2021-30300 or the next vulnerability affects your stack