CVE-2021-30327

Severity: medium (CVSS 6.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-06-14 · updated 2026-06-17
Weakness: CWE-120

Description

Buffer overflow in sahara protocol while processing commands leads to overwrite of secure configuration data in Snapdragon Mobile, Snapdragon Compute, Snapdragon Auto, Snapdragon IOT, Snapdragon Connectivity, Snapdragon Voice & Music

Affected products

Qualcomm Apq8097 Firmware: all versions
Qualcomm Apq8098 Firmware: all versions
Qualcomm Ipq6000 Firmware: all versions
Qualcomm Ipq6005 Firmware: all versions
Qualcomm Ipq6010 Firmware: all versions
Qualcomm Ipq6018 Firmware: all versions
Qualcomm Ipq6028 Firmware: all versions
Qualcomm Mdm9205 Firmware: all versions
Qualcomm Msm8997 Firmware: all versions
Qualcomm Msm8998 Firmware: all versions
Qualcomm Qca6595 Firmware: all versions
Qualcomm Qca6595Au Firmware: all versions
Qualcomm Qcn7605 Firmware: all versions
Qualcomm Qcn7605W Firmware: all versions
Qualcomm Qcn7606 Firmware: all versions
Qualcomm Qcn7606W Firmware: all versions
Qualcomm Qcs401 Firmware: all versions
Qualcomm Qcs402 Firmware: all versions
Qualcomm Qcs403 Firmware: all versions
Qualcomm Qcs404 Firmware: all versions
Qualcomm Qcs405 Firmware: all versions
Qualcomm Qcs407 Firmware: all versions
Qualcomm Sa2145P Firmware: all versions
Qualcomm Sa2150P Firmware: all versions
Qualcomm Sa4150P Firmware: all versions
Qualcomm Sa4155P Firmware: all versions
Qualcomm Sa415M Firmware: all versions
Qualcomm Sa4250P Firmware: all versions
Qualcomm Sa515M Firmware: all versions
Qualcomm Sa6115 Firmware: all versions

References

Get alerted when CVE-2021-30327 or the next vulnerability affects your stack