Vulnerability Description
Possible null pointer dereference in thread profile trap handler due to lack of thread ID validation before dereferencing it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Qualcomm | Apq8009W Firmware | - |
| Qualcomm | Apq8009W | - |
| Qualcomm | Apq8017 Firmware | - |
| Qualcomm | Apq8017 | - |
| Qualcomm | Apq8064Au Firmware | - |
| Qualcomm | Apq8064Au | - |
| Qualcomm | Apq8096Au Firmware | - |
| Qualcomm | Apq8096Au | - |
| Qualcomm | Ar6003 Firmware | - |
| Qualcomm | Ar6003 | - |
| Qualcomm | Ar8031 Firmware | - |
| Qualcomm | Ar8031 | - |
| Qualcomm | Ar8035 Firmware | - |
| Qualcomm | Ar8035 | - |
| Qualcomm | Csra6620 Firmware | - |
| Qualcomm | Csra6620 | - |
| Qualcomm | Csra6640 Firmware | - |
| Qualcomm | Csra6640 | - |
| Qualcomm | Csrb31024 Firmware | - |
| Qualcomm | Csrb31024 | - |
Related Weaknesses (CWE)
References
- https://www.qualcomm.com/company/product-security/bulletins/december-2021-bulletVendor Advisory
- https://www.qualcomm.com/company/product-security/bulletins/december-2021-bulletVendor Advisory
FAQ
What is CVE-2021-30270?
CVE-2021-30270 is a vulnerability with a CVSS score of 7.3 (HIGH). Possible null pointer dereference in thread profile trap handler due to lack of thread ID validation before dereferencing it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon...
How severe is CVE-2021-30270?
CVE-2021-30270 has been rated HIGH with a CVSS base score of 7.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-30270?
Check the references section above for vendor advisories and patch information. Affected products include: Qualcomm Apq8009W Firmware, Qualcomm Apq8009W, Qualcomm Apq8017 Firmware, Qualcomm Apq8017, Qualcomm Apq8064Au Firmware.