SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2021-30327

Buffer overflow in sahara protocol while processing commands leads to overwrite of secure configuration data in Snapdragon Mobile, Snapdragon Compute, Snapdragon Auto, Snapdragon IOT, Snapdragon Connectivity, Snapdragon Voice & Music

MEDIUM 6.8EPSS 0.20%

Does this matter?

Lower severity and a low EPSS score (0.20%). Track it; it rarely justifies an emergency change on its own.

Description

Buffer overflow in sahara protocol while processing commands leads to overwrite of secure configuration data in Snapdragon Mobile, Snapdragon Compute, Snapdragon Auto, Snapdragon IOT, Snapdragon Connectivity, Snapdragon Voice & Music

CVSS 3.1
6.8 MEDIUMCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.20% probability · 10th percentile
Public exploits
None in Exploit-DB
CISA KEV
Not listed
Weakness
CWE-120
Affected
qualcomm/apq8097 firmware · qualcomm/apq8098 firmware · qualcomm/ipq6000 firmware · qualcomm/ipq6005 firmware · qualcomm/ipq6010 firmware · qualcomm/ipq6018 firmware · qualcomm/ipq6028 firmware · qualcomm/mdm9205 firmware · qualcomm/msm8997 firmware · qualcomm/msm8998 firmware · qualcomm/qca6595 firmware · qualcomm/qca6595au firmware · qualcomm/qcn7605 firmware · qualcomm/qcn7605w firmware · qualcomm/qcn7606 firmware · qualcomm/qcn7606w firmware · qualcomm/qcs401 firmware · qualcomm/qcs402 firmware · qualcomm/qcs403 firmware · qualcomm/qcs404 firmware · +40 more
Source
product-security@qualcomm.com
EPSS trend
0%3%5%26 October 2026: 0.20%26 October 202626 October 2026

EPSS 0.2% since 26 October 2026; no change recorded yet. Points are recorded when the score first appears and whenever it moves by a percentage point or more.

Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.