What’s Vulnerable › Vulnerabilities

CVE-2021-30304

• Severity: critical (CVSS 9.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-10-20 · updated 2026-06-17
• Weakness: CWE-125

Description

Possible buffer out of bound read can occur due to improper validation of TBTT count and length while parsing the beacon response in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity

Affected products

• Qualcomm Qca2062 Firmware: all versions
• Qualcomm Qca2064 Firmware: all versions
• Qualcomm Qca2065 Firmware: all versions
• Qualcomm Qca2066 Firmware: all versions
• Qualcomm Sc8280Xp Firmware: all versions
• Qualcomm Wcd9380 Firmware: all versions
• Qualcomm Wcd9385 Firmware: all versions
• Qualcomm Wcn6850 Firmware: all versions
• Qualcomm Wcn6851 Firmware: all versions
• Qualcomm Wcn6855 Firmware: all versions
• Qualcomm Wcn6856 Firmware: all versions
• Qualcomm Wsa8830 Firmware: all versions
• Qualcomm Wsa8835 Firmware: all versions

References

• https://www.qualcomm.com/company/product-security/bulletins/october-2021-bulletin
• https://www.qualcomm.com/company/product-security/bulletins/october-2021-bulletin

Get alerted when CVE-2021-30304 or the next vulnerability affects your stack