CVE-2021-30346

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-06-14 · updated 2026-06-17

Description

RPM secure Stream can access any secure resource due to improper SMMU configuration in Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Affected products

Qualcomm Ar8035 Firmware: all versions
Qualcomm Qca9984 Firmware: all versions
Qualcomm Qcm2290 Firmware: all versions
Qualcomm Qcm4290 Firmware: all versions
Qualcomm Qcs2290 Firmware: all versions
Qualcomm Qcs405 Firmware: all versions
Qualcomm Qcs4290 Firmware: all versions
Qualcomm Sd460 Firmware: all versions
Qualcomm Sd480 Firmware: all versions
Qualcomm Sd662 Firmware: all versions
Qualcomm Sd680 Firmware: all versions
Qualcomm Sm6375 Firmware: all versions
Qualcomm Sw5100 Firmware: all versions
Qualcomm Sw5100P Firmware: all versions
Qualcomm Wcd9370 Firmware: all versions
Qualcomm Wcd9375 Firmware: all versions
Qualcomm Wcd9385 Firmware: all versions
Qualcomm Wcn3910 Firmware: all versions
Qualcomm Wcn3950 Firmware: all versions
Qualcomm Wcn3980 Firmware: all versions
Qualcomm Wcn3988 Firmware: all versions
Qualcomm Wcn3991 Firmware: all versions
Qualcomm Wcn3998 Firmware: all versions
Qualcomm Wcn3999 Firmware: all versions
Qualcomm Wsa8810 Firmware: all versions
Qualcomm Wsa8815 Firmware: all versions
Qualcomm Wsa8830 Firmware: all versions
Qualcomm Wsa8835 Firmware: all versions

References

https://www.qualcomm.com/company/product-security/bulletins/april-2022-bulletin
https://www.qualcomm.com/company/product-security/bulletins/april-2022-bulletin

Get alerted when CVE-2021-30346 or the next vulnerability affects your stack