VulnerabilityModified
CVE-2021-30339
Reading PRNG output may lead to improper key generation due to lack of buffer validation in Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
MEDIUM 5.5EPSS 0.16%
Does this matter?
Lower severity and a low EPSS score (0.16%). Track it; it rarely justifies an emergency change on its own.
Description
Reading PRNG output may lead to improper key generation due to lack of buffer validation in Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- EPSS
- 0.16% probability · 6th percentile
- CISA KEV
- Not listed
- Affected
- qualcomm/ar8035 firmware · qualcomm/qca6391 firmware · qualcomm/qca8081 firmware · qualcomm/qca8337 firmware · qualcomm/qca9984 firmware · qualcomm/qcm2290 firmware · qualcomm/qcm4290 firmware · qualcomm/qcm6490 firmware · qualcomm/qcs2290 firmware · qualcomm/qcs405 firmware · qualcomm/qcs4290 firmware · qualcomm/qcs6490 firmware · qualcomm/sd 8 gen1 5g firmware · qualcomm/sd460 firmware · qualcomm/sd480 firmware · qualcomm/sd662 firmware · qualcomm/sd680 firmware · qualcomm/sd690 5g firmware · qualcomm/sd750g firmware · qualcomm/sd765 firmware · +35 more
- Source
- product-security@qualcomm.com
References
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.