CVE-2021-30342

Severity: medium (CVSS 5.9 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-06-14 · updated 2026-06-17
Weakness: CWE-367

Description

Improper integrity check can lead to race condition between tasks PDCP and RRC? after a valid RRC Command packet has been received in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables

Affected products

Qualcomm Apq8009W Firmware: all versions
Qualcomm Apq8017 Firmware: all versions
Qualcomm Apq8096Au Firmware: all versions
Qualcomm Aqt1000 Firmware: all versions
Qualcomm Csrb31024 Firmware: all versions
Qualcomm Fsm10055 Firmware: all versions
Qualcomm Fsm10056 Firmware: all versions
Qualcomm Mdm8207 Firmware: all versions
Qualcomm Mdm9150 Firmware: all versions
Qualcomm Mdm9205 Firmware: all versions
Qualcomm Mdm9206 Firmware: all versions
Qualcomm Mdm9207 Firmware: all versions
Qualcomm Mdm9250 Firmware: all versions
Qualcomm Mdm9607 Firmware: all versions
Qualcomm Mdm9628 Firmware: all versions
Qualcomm Mdm9640 Firmware: all versions
Qualcomm Mdm9650 Firmware: all versions
Qualcomm Mdm9655 Firmware: all versions
Qualcomm Msm8909W Firmware: all versions
Qualcomm Msm8996Au Firmware: all versions
Qualcomm Qca4004 Firmware: all versions
Qualcomm Qca6174A Firmware: all versions
Qualcomm Qca6420 Firmware: all versions
Qualcomm Qca6430 Firmware: all versions
Qualcomm Qca6564A Firmware: all versions
Qualcomm Qca6564Au Firmware: all versions
Qualcomm Qca6574 Firmware: all versions
Qualcomm Qca6574A Firmware: all versions
Qualcomm Qca6574Au Firmware: all versions
Qualcomm Qca6584 Firmware: all versions

References

Get alerted when CVE-2021-30342 or the next vulnerability affects your stack