CVE-2021-30327
high-risk
Published 2022-06-14
Buffer overflow in sahara protocol while processing commands leads to overwrite of secure configuration data in Snapdragon Mobile, Snapdragon Compute, Snapdragon Auto, Snapdragon IOT, Snapdragon Connectivity, Snapdragon Voice & Music
Do I need to act?
-
0.03% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
7
CVSS 7.5/10
High
PHYSICAL
/ LOW complexity
Affected Products (20)
Apq8097 Firmware
Msm8997 Firmware
Qcn7605W Firmware
Qcn7606W Firmware
Qcs401 Firmware
Qcs402 Firmware
Qcs403 Firmware
Affected Vendors
References (2)
52
/ 100
high-risk
Severity
24/34 · High
Exploitability
0/34 · Minimal
Exposure
28/34 · Critical